wang feng wrote:
Hello, from api the attributes we can set for expectation only inclusive src,dst ip,port, and timeout, but from the kernel code like infunction "nf_ct_find_expectation" there is also a structure named "nf_conntrac_expect" with flags settings with NF_CT_EXPECT_PERMANENT which enable a permanent expectation, can the userland api in some ways to enable this feature too?
No, we currently don't have the necessary attribute to set expectation flags. Should be trivial to add though. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html