Re: [PATCH v6] netfilter: Xtables: idletimer target implementation

[Patrick McHardy <kaber@trash.net>]

Luciano Coelho wrote:
> This patch implements an idletimer Xtables target that can be used to
> identify when interfaces have been idle for a certain period of time.
>
> Timers are identified by labels and are created when a rule is set with a new
> label.  The rules also take a timeout value (in seconds) as an option.  If
> more than one rule uses the same timer label, the timer will be restarted
> whenever any of the rules get a hit.
>
> One entry for each timer is created in sysfs.  This attribute contains the
> timer remaining for the timer to expire.  The attributes are located under
> the xt_idletimer class:
>
> /sys/class/xt_idletimer/timers/<label>
>
> When the timer expires, the target module sends a sysfs notification to the
> userspace, which can then decide what to do (eg. disconnect to save power).
>   

Applied with a minor compiler warning fix:

  CC [M]  net/netfilter/xt_IDLETIMER.o
net/netfilter/xt_IDLETIMER.c:255: warning: initialization from 
incompatible pointer type

The struct xt_tgchk_param argument to ->checkentry is const.