netfilter: cttimeout: allow to set/get default protocol timeouts

Default timeouts are currently set via proc/sysctl interface, the typical pattern is a file name like: /proc/sys/net/netfilter/nf_conntrack_PROTOCOL_timeout_STATE This results in one entry per default protocol state timeout. This patch simplifies this by allowing to set default protocol timeouts via cttimeout netlink interface. This should allow us to get rid of the existing proc/sysctl code in the midterm.

Pablo Neira Ayuso committed 13 years ago

Commit 91cb4981 parent 180cf722 files · +155 −8Browse files

Showing the changes to include/uapi/linux (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter/nfnetlink_cttimeout.h+2−0

@@ -6,6 +6,8 @@ enum ctnl_timeout_msg_types { · 5 unmodified lines
6	IPCTNL_MSG_TIMEOUT_NEW,	6	IPCTNL_MSG_TIMEOUT_NEW,
7	IPCTNL_MSG_TIMEOUT_GET,	7	IPCTNL_MSG_TIMEOUT_GET,
8	IPCTNL_MSG_TIMEOUT_DELETE,	8	IPCTNL_MSG_TIMEOUT_DELETE,
		9	IPCTNL_MSG_TIMEOUT_DEFAULT_SET,
		10	IPCTNL_MSG_TIMEOUT_DEFAULT_GET,
9		11
10	IPCTNL_MSG_TIMEOUT_MAX	12	IPCTNL_MSG_TIMEOUT_MAX
11	};	13	};