Le 03/10/2017 à 16:03, Payam Chychi a écrit :
The concept of an original packet that is then tracked in table would be a tcp syn flag. syn bit is set to instruct that this is the 1st packet and its intention is to creat a connection/open socket. reply traffic relys on the 3way handshake for TCP (other methods used for UDP) which includes seq/ack values to track the progress as well as other attributes
These are transport protocol-specific details. Netfilter connection tracking is more generic than this. TCP connection tracking does not even require by default that the first packet has the SYN flag.
-- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
