From: Kelvie Wong Date: Wed, 2 May 2012 14:39:24 +0000 (+0000) Subject: netfilter: nf_ct_expect: partially implement ctnetlink_change_expect X-Git-Tag: v3.5-rc1~109^2~140^2~2 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9768e1ace458fa4ebf88bc3943fd8fb77113ed9c;p=pandora-kernel.git netfilter: nf_ct_expect: partially implement ctnetlink_change_expect This refreshes the "timeout" attribute in existing expectations if one is given. The use case for this would be for userspace helpers to extend the lifetime of the expectation when requested, as this is not possible right now without deleting/recreating the expectation. I use this specifically for forwarding DCERPC traffic through: DCERPC has a port mapper daemon that chooses a (seemingly) random port for future traffic to go to. We expect this traffic (with a reasonable timeout), but sometimes the port mapper will tell the client to continue using the same port. This allows us to extend the expectation accordingly. Signed-off-by: Kelvie Wong Signed-off-by: Pablo Neira Ayuso --- Reading git-diff-tree failed