"conntrack -L" shows us this two entries:
tcp 6 431999 ESTABLISHED src=192.168.1.1 dst=192.168.1.2 sport=51444 \
dport=22 src=192.168.1.2 dst=192.168.1.1 sport=22 dport=51444 [ASSURED] \
mark=0 established=1 related=0 new=3 reply=2 use=1
icmp 1 28 src=192.168.1.2 dst=149.20.20.133 type=8 code=0 id=63239 \
src=149.20.20.133 dst=192.168.1.2 type=0 code=0 id=63239 mark=0 \
established=2 related=0 new=2 reply=1 use=1
Isn't there supposed to be secctx (SELinux context) field showing as
well or is this still not implemented in the conntrack tools?
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html