Re: How do I use ip_conntrack_destroyed?

[KOVACS Krisztian <hidden@balabit.hu>]

   Hi,

Emmanuel Guiton wrote:
> /* Call me when a conntrack is destroyed. */
> extern void (*ip_conntrack_destroyed)(struct ip_conntrack *conntrack);
> 
> So I guess it particularly fits with my needs. But what about using it?
> 
> Does it work so that I have to write something like:
> ip_conntrack_destroyed = &my_counter_function
> in my ipt_xxxx_target function and then do my stuff in my_counter_function?

   The ip_conntrack_destroyed function pointer is actually an ugly hack so 
that NAT is able to clean up when a conntrack entry is destroyed. So, 
changing that pointer is not allowed if you're using NAT.

   I think you'd need the functionality of ctnetlink's notifier 
registration facility. See POM/extra.

-- 
   Regards,
     Krisztian KOVACS