Matching connection tracking stateful metainformation: Revision history

15 April 2021

• curprev 19:5519:55, 15 April 2021‎ Fmyhr talk contribs‎ 16,305 bytes +1,320‎ conntrack command sample output table: linked ct matches to sections below.
• curprev 19:4419:44, 15 April 2021‎ Fmyhr talk contribs‎ 14,985 bytes +153‎ Added ct count section, linking to connlimits page.
• curprev 19:3019:30, 15 April 2021‎ Fmyhr talk contribs‎ 14,832 bytes +75‎ Reordered ct matches, tried to put most-used near top and the rest in logical order (open to some interpretation, but think better than alphabetical).
• curprev 19:2019:20, 15 April 2021‎ Fmyhr talk contribs‎ 14,757 bytes +398‎ Added minimal sections for conntrack L3 and L4 source and destination matches.
• curprev 19:1219:12, 15 April 2021‎ Fmyhr talk contribs‎ 14,359 bytes +1,401‎ Added sections; ct l3proto, protocol, packets, bytes, avgpkt.
• curprev 18:4518:45, 15 April 2021‎ Fmyhr talk contribs‎ 12,958 bytes +373‎ Added ct id section. Added note about specifying optional direction with ct zone.
• curprev 18:1618:16, 15 April 2021‎ Fmyhr talk contribs‎ 12,585 bytes +240‎ Added very basic section for ct zone.
• curprev 18:1218:12, 15 April 2021‎ Fmyhr talk contribs‎ 12,345 bytes +658‎ Added (very basic) sections for ct direction, label and expiration.
• curprev 17:4017:40, 15 April 2021‎ Fmyhr talk contribs‎ 11,687 bytes +996‎ Include user-assigned conntrack metadata, and link to Set packet connection tracking metainformation page.

13 April 2021

• curprev 13:0213:02, 13 April 2021‎ Fmyhr talk contribs‎ 10,691 bytes +2,937‎ ct status: include table of all known bits.
• curprev 02:2602:26, 13 April 2021‎ Fmyhr talk contribs‎ 7,754 bytes +270‎ ct status: noted it's a bitfield, included some sample matches.
• curprev 01:5601:56, 13 April 2021‎ Fmyhr talk contribs‎ 7,484 bytes +276‎ Improved conntrack command output table.
• curprev 01:2201:22, 13 April 2021‎ Fmyhr talk contribs‎ m 7,208 bytes +8‎ Be explicit when referring to conntrack command, as opposed to a conntrack entry.

12 April 2021

• curprev 14:0514:05, 12 April 2021‎ Fmyhr talk contribs‎ m 7,200 bytes +255‎ Linked existing sections in example conntrack output table.
• curprev 13:5913:59, 12 April 2021‎ Fmyhr talk contribs‎ 6,945 bytes +105‎ Linked in.h for inet_proto.
• curprev 13:5213:52, 12 April 2021‎ Fmyhr talk contribs‎ m 6,840 bytes +13‎ More clearly label "example value" column of conntrack command output.
• curprev 13:4913:49, 12 April 2021‎ Fmyhr talk contribs‎ 6,827 bytes +3,128‎ Added table of conntrack command output fields and ct selectors used to match them.
• curprev 12:3712:37, 12 April 2021‎ Fmyhr talk contribs‎ 3,699 bytes +85‎ conntrack state: converted example to nft -f format, edited slightly.
• curprev 11:5911:59, 12 April 2021‎ Fmyhr talk contribs‎ 3,614 bytes +1,248‎ Added table of conntrack states.

11 April 2021

• curprev 22:3922:39, 11 April 2021‎ Fmyhr talk contribs‎ 2,366 bytes +54‎ Linked conntrack man page.
• curprev 22:3822:38, 11 April 2021‎ Fmyhr talk contribs‎ 2,312 bytes +437‎ Use sections for expressions. Rewrote intro. Added sample conntrack output (still need to USE it in examples!). Linked conntrack data types. Noted ct state is most used.

10 March 2021

• curprev 17:4017:40, 10 March 2021‎ Fmyhr talk contribs‎ m 1,875 bytes +49‎ →‎Matching the conntrack helper: Linked ct helpers page.

15 February 2021

• curprev 13:2113:21, 15 February 2021‎ Fmyhr talk contribs‎ 1,826 bytes −129‎ →‎Matching the state information: Edited for clarity, removed link now included in Connection Tracking System page.
• curprev 13:0313:03, 15 February 2021‎ Fmyhr talk contribs‎ m 1,955 bytes +50‎ Reword intro, link Wikipedia stateful firewall article.
• curprev 00:2800:28, 15 February 2021‎ Fmyhr talk contribs‎ m 1,905 bytes +29‎ link Connection Tracking System

18 December 2020

• curprev 18:3818:38, 18 December 2020‎ Pablo talk contribs‎ 1,876 bytes +200‎ →‎Matching the conntrack mark

4 May 2017

• curprev 11:4711:47, 4 May 2017‎ Arturo talk contribs‎ 1,676 bytes −683‎ cleanup file, split content to 'setting packet conntrack metainformation'
• curprev 11:1011:10, 4 May 2017‎ Arturo talk contribs‎ 2,359 bytes +312‎ →‎notrack: hints about priority

10 January 2017

• curprev 13:5613:56, 10 January 2017‎ Arturo talk contribs‎ 2,047 bytes +111‎ →‎Matching conntrack information: add some bits about status matches

23 December 2016

• curprev 14:2114:21, 23 December 2016‎ Arturo talk contribs‎ 1,936 bytes +335‎ add notrack reference

13 July 2016

• curprev 18:4618:46, 13 July 2016‎ Pablo talk contribs‎ 1,601 bytes +1,601‎ Created page with "As in ''iptables'', you can match the state tracking information (sometimes refered as ''conntrack'' or ''ct'' information) that Netfilter collects through the ''Connection Tr..."