netfilter: ctnetlink: export nf_conntrack_max

Browse source

IPCTNL_MSG_CT_GET_STATS netlink command allow to monitor current number
of conntrack entries. However, if one wants to compare it with the
maximum (and detect exhaustion), the only solution is currently to read
sysctl value.

This patch add nf_conntrack_max value in netlink message, and simplify
monitoring for application built on netlink API.

Signed-off-by: Florent Fourcot <florent.fourcot@wifirst.fr>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Florent Fourcot 2018-05-06 16:30:14 +02:00 • committed by Pablo Neira Ayuso

parent bfb15f2a95

commit 538c5672be

3 changed files with 5 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1

include/uapi/linux/netfilter/nfnetlink_conntrack.h

View file

1

net/netfilter/nf_conntrack_core.c

View file

3

net/netfilter/nf_conntrack_netlink.c

View file