On Wed, Aug 01, 2012 at 11:33:28PM +0200, Eric Leblond wrote: > > Hello, > > This patch implements filtering for NFCT input plugin. It adds > two configuration variables src_filter and dst_filter which > can be used to select the IPv4 or IPv6 network to filter on > for the source or destination address. > > For IPv4 this is working fine but despite the latest update > from Pablo on libnetfilter_conntrack, I still don't manage > to get IPv6 working. Any help appreciated on this. Note that ulogd2 initially dumps the entire table. The filtering will not apply to dumping, only to events. You need to filter filter dumps. conntrackd already has a framework for user-space filtering, that is used for filter. You can grab it. We can probably later move it to libnetfilter_conntrack to avoid code redundancy. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
