From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mohit Mehta Subject: Re: `conntrack -L --src-nat --dst-nat` doesn't work with version 0.9.14 Date: Thu, 10 Jun 2010 11:04:59 -0700 (PDT) Message-ID: <146038617.153911276193099494.JavaMail.root@tahiti.vyatta.com> References: <1746650726.153891276193083932.JavaMail.root@tahiti.vyatta.com> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Cc: netfilter-devel@vger.kernel.org To: Pablo Neira Ayuso Return-path: Received: from mail.vyatta.com ([76.74.103.46]:53001 "EHLO mail.vyatta.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1757215Ab0FJSGk (ORCPT ); Thu, 10 Jun 2010 14:06:40 -0400 In-Reply-To: <1746650726.153891276193083932.JavaMail.root@tahiti.vyatta.com> Sender: netfilter-devel-owner@vger.kernel.org List-ID: ----- "Pablo Neira Ayuso" wrote: > Mohit Mehta wrote: > > Hi Everyone, > > > > With previous versions of conntrack [for eg. version 0.9.6]; you > could list conntrack entries and have them filtered for both source > and destination NAT. This was great for looking at all NAT entries at > the same time. > > > > However, it seems that in the current version that doesn't work i.e. > you cannot filter entries for both source and destination NAT > together. Filtering on either of the two types still works fine. I'm > not quite sure about the history of this if any; so can someone point > out whether this change was intentional or an oversight? > > Could you test if this patch helps? Works Great! Thanks Pablo.