On 06/06/11 16:26, Clemens Eisserer wrote: > Hi, > > We are using ulog2/nflog for logging packets and connections, which > works quite well. > > However we haven't found a reliable way to determine which packets > belong to which connection. > There seem to be two distinct IDs for both packets (nflog) as well as > connection IDs issued by conntrack, > is there some correlation between the two IDs? No. > Or is there any other (maybe even better) way to determine which > logged packet belongs to which connection? You can build the tuple from the packet in user-space to look up the conntrack via libnetfilter_conntrack. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
