nf_conntrack_common.h
001: #ifndef _NF_CONNTRACK_COMMON_H
002: #define _NF_CONNTRACK_COMMON_H
003:
004:
005:
006: enum ip_conntrack_info {
007:
008: IP_CT_ESTABLISHED,
009:
010:
011:
012: IP_CT_RELATED,
013:
014:
015:
016: IP_CT_NEW,
017:
018:
019: IP_CT_IS_REPLY,
020:
021: IP_CT_ESTABLISHED_REPLY = IP_CT_ESTABLISHED + IP_CT_IS_REPLY,
022: IP_CT_RELATED_REPLY = IP_CT_RELATED + IP_CT_IS_REPLY,
023: IP_CT_NEW_REPLY = IP_CT_NEW + IP_CT_IS_REPLY,
024:
025: IP_CT_NUMBER = IP_CT_IS_REPLY * 2 - 1
026: };
027:
028:
029: enum ip_conntrack_status {
030:
031: IPS_EXPECTED_BIT = 0,
032: IPS_EXPECTED = (1 << IPS_EXPECTED_BIT),
033:
034:
035: IPS_SEEN_REPLY_BIT = 1,
036: IPS_SEEN_REPLY = (1 << IPS_SEEN_REPLY_BIT),
037:
038:
039: IPS_ASSURED_BIT = 2,
040: IPS_ASSURED = (1 << IPS_ASSURED_BIT),
041:
042:
043: IPS_CONFIRMED_BIT = 3,
044: IPS_CONFIRMED = (1 << IPS_CONFIRMED_BIT),
045:
046:
047: IPS_SRC_NAT_BIT = 4,
048: IPS_SRC_NAT = (1 << IPS_SRC_NAT_BIT),
049:
050:
051: IPS_DST_NAT_BIT = 5,
052: IPS_DST_NAT = (1 << IPS_DST_NAT_BIT),
053:
054:
055: IPS_NAT_MASK = (IPS_DST_NAT | IPS_SRC_NAT),
056:
057:
058: IPS_SEQ_ADJUST_BIT = 6,
059: IPS_SEQ_ADJUST = (1 << IPS_SEQ_ADJUST_BIT),
060:
061:
062: IPS_SRC_NAT_DONE_BIT = 7,
063: IPS_SRC_NAT_DONE = (1 << IPS_SRC_NAT_DONE_BIT),
064:
065: IPS_DST_NAT_DONE_BIT = 8,
066: IPS_DST_NAT_DONE = (1 << IPS_DST_NAT_DONE_BIT),
067:
068:
069: IPS_NAT_DONE_MASK = (IPS_DST_NAT_DONE | IPS_SRC_NAT_DONE),
070:
071:
072: IPS_DYING_BIT = 9,
073: IPS_DYING = (1 << IPS_DYING_BIT),
074:
075:
076: IPS_FIXED_TIMEOUT_BIT = 10,
077: IPS_FIXED_TIMEOUT = (1 << IPS_FIXED_TIMEOUT_BIT),
078:
079:
080: IPS_TEMPLATE_BIT = 11,
081: IPS_TEMPLATE = (1 << IPS_TEMPLATE_BIT),
082:
083:
084: IPS_UNTRACKED_BIT = 12,
085: IPS_UNTRACKED = (1 << IPS_UNTRACKED_BIT),
086: };
087:
088:
089: enum ip_conntrack_events {
090: IPCT_NEW,
091: IPCT_RELATED,
092: IPCT_DESTROY,
093: IPCT_REPLY,
094: IPCT_ASSURED,
095: IPCT_PROTOINFO,
096: IPCT_HELPER,
097: IPCT_MARK,
098: IPCT_NATSEQADJ,
099: IPCT_SECMARK,
100: };
101:
102: enum ip_conntrack_expect_events {
103: IPEXP_NEW,
104: IPEXP_DESTROY,
105: };
106:
107:
108: #define NF_CT_EXPECT_PERMANENT 0x1
109: #define NF_CT_EXPECT_INACTIVE 0x2
110: #define NF_CT_EXPECT_USERSPACE 0x4
111:
112:
113: #endif
114:
© Andrew Scott 2006 -
2025,
All Rights Reserved