netfilter: nf_conntrack: nf_conntrack snmp helper
authorJiri Olsa <jolsa@redhat.com>
Tue, 18 Jan 2011 17:12:24 +0000 (18:12 +0100)
committerPatrick McHardy <kaber@trash.net>
Tue, 18 Jan 2011 17:12:24 +0000 (18:12 +0100)
commit93557f53e1fbd9e2b6574ab0a9b5852628fde9e3
treeb6bc24a10d4a48c354935d8e4fe4d110cf6dc060
parent94d117a1c78df38abdea0c09ef00c205b923b567
netfilter: nf_conntrack: nf_conntrack snmp helper

Adding support for SNMP broadcast connection tracking. The SNMP
broadcast requests are now paired with the SNMP responses.
Thus allowing using SNMP broadcasts with firewall enabled.

Please refer to the following conversation:
http://marc.info/?l=netfilter-devel&m=125992205006600&w=2

Patrick McHardy wrote:
> > The best solution would be to add generic broadcast tracking, the
> > use of expectations for this is a bit of abuse.
> > The second best choice I guess would be to move the help() function
> > to a shared module and generalize it so it can be used for both.
This patch implements the "second best choice".

Since the netbios-ns conntrack module uses the same helper
functionality as the snmp, only one helper function is added
for both snmp and netbios-ns modules into the new object -
nf_conntrack_broadcast.

Signed-off-by: Jiri Olsa <jolsa@redhat.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
include/linux/netfilter/nf_conntrack_snmp.h [new file with mode: 0644]
include/net/netfilter/nf_conntrack_helper.h
net/ipv4/netfilter/Kconfig
net/ipv4/netfilter/nf_nat_snmp_basic.c
net/netfilter/Kconfig
net/netfilter/Makefile
net/netfilter/nf_conntrack_broadcast.c [new file with mode: 0644]
net/netfilter/nf_conntrack_netbios_ns.c
net/netfilter/nf_conntrack_snmp.c [new file with mode: 0644]