netfilter: nfnetlink_log: allow to attach conntrack
authorKen-ichirou MATSUZAWA <chamaken@gmail.com>
Mon, 5 Oct 2015 02:50:46 +0000 (11:50 +0900)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 5 Oct 2015 15:32:14 +0000 (17:32 +0200)
commita29a9a585b2840a205f085a34dfd65c75e86f7c3
tree17d5b72301fc5638176d6868706dd98442f813b2
parent224a05975ebbbdf507c65043f8aba280ccb39e6e
netfilter: nfnetlink_log: allow to attach conntrack

This patch enables to include the conntrack information together
with the packet that is sent to user-space via NFLOG, then a
user-space program can acquire NATed information by this NFULA_CT
attribute.

Including the conntrack information is optional, you can set it
via NFULNL_CFG_F_CONNTRACK flag with the NFULA_CFG_FLAGS attribute
like NFQUEUE.

Signed-off-by: Ken-ichirou MATSUZAWA <chamas@h4.dion.ne.jp>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nfnetlink_log.h
net/netfilter/Kconfig
net/netfilter/nfnetlink_log.c