* Question about IP_conntrack entry in /proc
@ 2004-01-01 19:39 Eddahbi Karim
2004-01-01 20:17 ` Antony Stone
0 siblings, 1 reply; 3+ messages in thread
From: Eddahbi Karim @ 2004-01-01 19:39 UTC (permalink / raw)
To: netfilter
Hiya,
I'm writing a documentation about Iptables and I want to know if the
first src, dst, sport, dport flags are related to the last packet seen
or to the socket ?
Example : tcp 6 431922 ESTABLISHED src=1.2.3.4 dst=5.6.7.8
sport=32827 dport=5190
Does the src/dst/sport/dport flags are related to the whole connection
or just to the last packet seen by the connection tracker ? :)
--
--
Eddahbi Karim
Phone :
(33) (0)6 61 30 57 77
France
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Question about IP_conntrack entry in /proc
2004-01-01 19:39 Question about IP_conntrack entry in /proc Eddahbi Karim
@ 2004-01-01 20:17 ` Antony Stone
2004-01-01 21:01 ` Eddahbi Karim
0 siblings, 1 reply; 3+ messages in thread
From: Antony Stone @ 2004-01-01 20:17 UTC (permalink / raw)
To: netfilter
On Thursday 01 January 2004 7:39 pm, Eddahbi Karim wrote:
> Hiya,
>
> I'm writing a documentation about Iptables and I want to know if the
> first src, dst, sport, dport flags are related to the last packet seen
> or to the socket ?
>
> Example : tcp 6 431922 ESTABLISHED src=1.2.3.4 dst=5.6.7.8
> sport=32827 dport=5190
>
> Does the src/dst/sport/dport flags are related to the whole connection
> or just to the last packet seen by the connection tracker ? :)
They relate to the initial packet which created the connection.
Therefore 'source' means the machine which sent the first packet, and
'destination' means the machine it was sent to.
The data in the conntrack table remains static (except for the timeout)
throughout the course of the established connection.
Antony.
--
If at first you don't succeed, destroy all the evidence that you tried.
Please reply to the list;
please don't CC me.
^ permalink raw reply [flat|nested] 3+ messages in thread* Re: Question about IP_conntrack entry in /proc
2004-01-01 20:17 ` Antony Stone
@ 2004-01-01 21:01 ` Eddahbi Karim
0 siblings, 0 replies; 3+ messages in thread
From: Eddahbi Karim @ 2004-01-01 21:01 UTC (permalink / raw)
To: netfilter
Le jeu 01/01/2004 à 21:17, Antony Stone a écrit :
[snip My message]
> They relate to the initial packet which created the connection.
>
> Therefore 'source' means the machine which sent the first packet, and
> 'destination' means the machine it was sent to.
>
> The data in the conntrack table remains static (except for the timeout)
> throughout the course of the established connection.
>
> Antony.
Ok, thanks for this accurate answer.
--
--
Eddahbi Karim
Phone :
(33) (0)6 61 30 57 77
France
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2004-01-01 21:01 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-01-01 19:39 Question about IP_conntrack entry in /proc Eddahbi Karim
2004-01-01 20:17 ` Antony Stone
2004-01-01 21:01 ` Eddahbi Karim
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox