[NETFILTER]: nf_conntrack: introduce expectation classes and policies
authorPatrick McHardy <kaber@trash.net>
Wed, 26 Mar 2008 03:09:15 +0000 (20:09 -0700)
committerDavid S. Miller <davem@davemloft.net>
Wed, 26 Mar 2008 03:09:15 +0000 (20:09 -0700)
commit6002f266b3e7f0acc2d5158cddbed41730b02e82
treef776f47618eef4da0d6c43b6f34fe6634d426a8d
parent359b9ab614aba71c2c3bc047efbd6d12dd4a2b9e
[NETFILTER]: nf_conntrack: introduce expectation classes and policies

Introduce expectation classes and policies. An expectation class
is used to distinguish different types of expectations by the
same helper (for example audio/video/t.120). The expectation
policy is used to hold the maximum number of expectations and
the initial timeout for each class.

The individual classes are isolated from each other, which means
that for example an audio expectation will only evict other audio
expectations.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
15 files changed:
include/net/netfilter/nf_conntrack.h
include/net/netfilter/nf_conntrack_expect.h
include/net/netfilter/nf_conntrack_helper.h
net/ipv4/netfilter/nf_nat_snmp_basic.c
net/netfilter/nf_conntrack_amanda.c
net/netfilter/nf_conntrack_expect.c
net/netfilter/nf_conntrack_ftp.c
net/netfilter/nf_conntrack_h323_main.c
net/netfilter/nf_conntrack_helper.c
net/netfilter/nf_conntrack_irc.c
net/netfilter/nf_conntrack_netbios_ns.c
net/netfilter/nf_conntrack_pptp.c
net/netfilter/nf_conntrack_sane.c
net/netfilter/nf_conntrack_sip.c
net/netfilter/nf_conntrack_tftp.c