Introduce user space conntrack tool

Introduce user space conntrack tool

[Pablo Neira]

[-- Attachment #1: Type: text/plain, Size: 1045 bytes --]

I've started a tool to do common manipulation conntrack. Please, it is 
*very* raw yet, it still need work but I think that it could be 
interesting. Of course, it requires libctnetlink and libnfnetlink.

An overview:

o List conntrack table

      $ conntrack -L conntrack

(Better that cat'ing /proc/net/ip_conntrack all day which is known to 
harm performance)

o Get a conntrack

      $ conntrack -G conntrack --reply-src 85.136.102.173 \
        --reply-dst 66.111.58.51 -p tcp --reply-port-src 44843 \
        --reply-port-dst 993 -i 13

o Delete a conntrack

      $ conntrack -D conntrack --reply-src 85.136.102.173 \
        --reply-dst 66.111.58.51 -p tcp --reply-port-src 44843 \
        --reply-port-dst 993 -i 13

o Create a conntrack

      $ conntrack -I conntrack --orig-src 1.1.1.4 --orig-dst 2.2.2.3 \
      --reply-src 2.2.2.3 --reply-dst 1.1.1.4 -p tcp --orig-port-src 20 \
      --orig-port-dst 10 --reply-port-src 10 --orig-port-dst 20 \
      -u ASSURED -t 100

o Flush conntrack table (not implemented)
o Display events

[-- Attachment #2: conntrack-0.1.tar.gz --]
[-- Type: application/gzip, Size: 11692 bytes --]

Re: Introduce user space conntrack tool

[Krzysztof Oledzki]

[-- Attachment #1: Type: TEXT/PLAIN, Size: 366 bytes --]



On Mon, 28 Mar 2005, Pablo Neira wrote:

> I've started a tool to do common manipulation conntrack. Please, it is *very* 
> raw yet, it still need work but I think that it could be interesting. Of 
> course, it requires libctnetlink and libnfnetlink.

Great job! Any plans for integrate libctnetlink into mainline?

Best regards,

 			Krzysztof Olędzki