netfilter: ctnetlink: dump entries from the dying and unconfirmed lists

This patch adds a new operation to dump the content of the dying and unconfirmed lists. Under some situations, the global conntrack counter can be inconsistent with the number of entries that we can dump from the conntrack table. The way to resolve this is to allow dumping the content of the unconfirmed and dying lists, so far it was not possible to look at its content. This provides some extra instrumentation to resolve problematic situations in which anyone suspects memory leaks.

Pablo Neira Ayuso committed 13 years ago

Commit d871bef1 parent 04dac012 files · +110 −0Browse files

Showing the changes to include/uapi (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter/nfnetlink_conntrack.h+2−0

@@ -9,6 +9,8 @@ enum cntl_msg_types { · 8 unmodified lines
9	IPCTNL_MSG_CT_GET_CTRZERO,	9	IPCTNL_MSG_CT_GET_CTRZERO,
10	IPCTNL_MSG_CT_GET_STATS_CPU,	10	IPCTNL_MSG_CT_GET_STATS_CPU,
11	IPCTNL_MSG_CT_GET_STATS,	11	IPCTNL_MSG_CT_GET_STATS,
		12	IPCTNL_MSG_CT_GET_DYING,
		13	IPCTNL_MSG_CT_GET_UNCONFIRMED,
12		14
13	IPCTNL_MSG_MAX	15	IPCTNL_MSG_MAX
14	};	16	};