Re: [PATCH 4/7] Add ctnetlink_change_protoinfo

[Pablo Neira <pablo@eurodev.net>]

Hi Harald,

Ok, I'll try to be more verbose, these surely will help to understand 
what I'm trying to do with the patches.

Harald Welte wrote:
> On Mon, Aug 01, 2005 at 07:05:12PM +0200, Pablo Neira wrote:
> 
>>Implement a function to change the private protocol information stored in a 
>>conntrack.
> 
> I removed this from the patch intentionally for now.  I really don't
> like the idea of userspace messing with the protocol specific state.
> 
> For now (this can change in the future) my policy is:  Userspace can
> only change 'safe' things in the conntrack table.

Why? Currently if I create a TCP conntrack, the user won't be able to 
set the state, so the state will be set to NONE.

Besides, I think that libnfnetlink_conntrack must provide as many 
features to manipulate the connection tracking as possible. For example, 
think that someone whats to use libctnetlink to implement some kind of 
conntrack replication. If the user mess with it, it's his fault.

--
Pablo