.. LINENO 2

.. SPDX-License-Identifier: GPL-2.0
.. NOTE: This document was auto-generated.


.. _netlink-conntrack:


==========================================
Family ``conntrack`` netlink specification
==========================================


.. contents:: :depth: 3


-------
Summary
-------


Netfilter connection tracking subsystem over nfnetlink

----------
Operations
----------


.. LINENO 554

.. _conntrack-operation-get:

get
===
get / dump entries

:attribute-set: :ref:`conntrack-attribute-set-conntrack-attrs`
:fixed-header: :ref:`conntrack-definition-nfgenmsg`
:do:
.. LINENO 559

    **request**
        :attributes: [``tuple-orig``, ``tuple-reply``, ``zone``]

    **reply**
        :attributes: [``tuple-orig``, ``tuple-reply``, ``status``, ``protoinfo``, ``help``, ``nat-src``, ``nat-dst``, ``timeout``, ``mark``, ``counters-orig``, ``counters-reply``, ``use``, ``id``, ``nat-dst``, ``tuple-master``, ``seq-adj-orig``, ``seq-adj-reply``, ``zone``, ``secctx``, ``labels``, ``synproxy``]

:dump:
.. LINENO 590

    **request**
        :attributes: [``mark``, ``filter``, ``status``, ``zone``]

    **reply**
        :attributes: [``tuple-orig``, ``tuple-reply``, ``status``, ``protoinfo``, ``help``, ``nat-src``, ``nat-dst``, ``timeout``, ``mark``, ``counters-orig``, ``counters-reply``, ``use``, ``id``, ``nat-dst``, ``tuple-master``, ``seq-adj-orig``, ``seq-adj-reply``, ``zone``, ``secctx``, ``labels``, ``synproxy``]



.. LINENO 622

.. _conntrack-operation-get-stats:

get-stats
=========
dump pcpu conntrack stats

:attribute-set: :ref:`conntrack-attribute-set-conntrack-stats-attrs`
:fixed-header: :ref:`conntrack-definition-nfgenmsg`
:dump:
.. LINENO 627

    **request**


    **reply**
        :attributes: [``searched``, ``found``, ``insert``, ``insert-failed``, ``drop``, ``early-drop``, ``error``, ``search-restart``, ``clash-resolve``, ``chain-toolong``]




-----------
Definitions
-----------


.. LINENO 11

.. _conntrack-definition-nfgenmsg:

nfgenmsg
========
:type: struct


:members:
    :nfgen-family (``u8``): 
    :version (``u8``): 
    :res-id (``u16``): 


.. LINENO 25

.. _conntrack-definition-nf-ct-tcp-flags-mask:

nf-ct-tcp-flags-mask
====================
:type: struct


:members:
    :flags (``u8``): 
    :mask (``u8``): 


.. LINENO 39

.. _conntrack-definition-nf-ct-tcp-flags:

nf-ct-tcp-flags
===============
:type: flags


:entries:
    - ``window-scale``
    - ``sack-perm``
    - ``close-init``
    - ``be-liberal``
    - ``unacked``
    - ``maxack``
    - ``challenge-ack``
    - ``simultaneous-open``


.. LINENO 51

.. _conntrack-definition-nf-ct-tcp-state:

nf-ct-tcp-state
===============
:type: enum


:entries:
    - ``none``
    - ``syn-sent``
    - ``syn-recv``
    - ``established``
    - ``fin-wait``
    - ``close-wait``
    - ``last-ack``
    - ``time-wait``
    - ``close``
    - ``syn-sent2``
    - ``max``
    - ``ignore``
    - ``retrans``
    - ``unack``
    - ``timeout-max``


.. LINENO 70

.. _conntrack-definition-nf-ct-sctp-state:

nf-ct-sctp-state
================
:type: enum


:entries:
    - ``none``
    - ``cloned``
    - ``cookie-wait``
    - ``cookie-echoed``
    - ``established``
    - ``shutdown-sent``
    - ``shutdown-received``
    - ``shutdown-ack-sent``
    - ``shutdown-heartbeat-sent``


.. LINENO 83

.. _conntrack-definition-nf-ct-status:

nf-ct-status
============
:type: flags


:entries:
    - ``expected``
    - ``seen-reply``
    - ``assured``
    - ``confirmed``
    - ``src-nat``
    - ``dst-nat``
    - ``seq-adj``
    - ``src-nat-done``
    - ``dst-nat-done``
    - ``dying``
    - ``fixed-timeout``
    - ``template``
    - ``nat-clash``
    - ``helper``
    - ``offload``
    - ``hw-offload``



--------------
Attribute sets
--------------


.. _conntrack-attribute-set-counter-attrs:

counter-attrs
=============
.. LINENO 108

packets (``u64``)
~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 112

bytes (``u64``)
~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 116

packets-old (``u32``)
~~~~~~~~~~~~~~~~~~~~~


.. LINENO 119

bytes-old (``u32``)
~~~~~~~~~~~~~~~~~~~


.. LINENO 122

pad (``pad``)
~~~~~~~~~~~~~


.. _conntrack-attribute-set-tuple-proto-attrs:

tuple-proto-attrs
=================
.. LINENO 128

proto-num (``u8``)
~~~~~~~~~~~~~~~~~~
:doc: l4 protocol number


.. LINENO 132

proto-src-port (``u16``)
~~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:doc: l4 source port


.. LINENO 137

proto-dst-port (``u16``)
~~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:doc: l4 source port


.. LINENO 142

proto-icmp-id (``u16``)
~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:doc: l4 icmp id


.. LINENO 147

proto-icmp-type (``u8``)
~~~~~~~~~~~~~~~~~~~~~~~~


.. LINENO 150

proto-icmp-code (``u8``)
~~~~~~~~~~~~~~~~~~~~~~~~


.. LINENO 153

proto-icmpv6-id (``u16``)
~~~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:doc: l4 icmp id


.. LINENO 158

proto-icmpv6-type (``u8``)
~~~~~~~~~~~~~~~~~~~~~~~~~~


.. LINENO 161

proto-icmpv6-code (``u8``)
~~~~~~~~~~~~~~~~~~~~~~~~~~


.. _conntrack-attribute-set-tuple-ip-attrs:

tuple-ip-attrs
==============
.. LINENO 167

ip-v4-src (``u32``)
~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:display-hint: ipv4
:doc: ipv4 source address


.. LINENO 173

ip-v4-dst (``u32``)
~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:display-hint: ipv4
:doc: ipv4 destination address


.. LINENO 179

ip-v6-src (``binary``)
~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:display-hint: ipv6
:doc: ipv6 source address


.. LINENO 187

ip-v6-dst (``binary``)
~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:display-hint: ipv6
:doc: ipv6 destination address


.. _conntrack-attribute-set-tuple-attrs:

tuple-attrs
===========
.. LINENO 198

tuple-ip (``nest``)
~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-tuple-ip-attrs`
:doc: conntrack l3 information


.. LINENO 203

tuple-proto (``nest``)
~~~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-tuple-proto-attrs`
:doc: conntrack l4 information


.. LINENO 208

tuple-zone (``u16``)
~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:doc: conntrack zone id


.. _conntrack-attribute-set-protoinfo-tcp-attrs:

protoinfo-tcp-attrs
===================
.. LINENO 216

tcp-state (``u8``)
~~~~~~~~~~~~~~~~~~
:enum: :ref:`conntrack-definition-nf-ct-tcp-state`
:doc: tcp connection state


.. LINENO 221

tcp-wscale-original (``u8``)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
:doc: window scaling factor in original direction


.. LINENO 225

tcp-wscale-reply (``u8``)
~~~~~~~~~~~~~~~~~~~~~~~~~
:doc: window scaling factor in reply direction


.. LINENO 229

tcp-flags-original (``binary``)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
:struct: :ref:`conntrack-definition-nf-ct-tcp-flags-mask`


.. LINENO 233

tcp-flags-reply (``binary``)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
:struct: :ref:`conntrack-definition-nf-ct-tcp-flags-mask`


.. _conntrack-attribute-set-protoinfo-dccp-attrs:

protoinfo-dccp-attrs
====================
.. LINENO 240

dccp-state (``u8``)
~~~~~~~~~~~~~~~~~~~
:doc: dccp connection state


.. LINENO 244

dccp-role (``u8``)
~~~~~~~~~~~~~~~~~~


.. LINENO 247

dccp-handshake-seq (``u64``)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 251

dccp-pad (``pad``)
~~~~~~~~~~~~~~~~~~


.. _conntrack-attribute-set-protoinfo-sctp-attrs:

protoinfo-sctp-attrs
====================
.. LINENO 257

sctp-state (``u8``)
~~~~~~~~~~~~~~~~~~~
:doc: sctp connection state
:enum: :ref:`conntrack-definition-nf-ct-sctp-state`


.. LINENO 262

vtag-original (``u32``)
~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 266

vtag-reply (``u32``)
~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. _conntrack-attribute-set-protoinfo-attrs:

protoinfo-attrs
===============
.. LINENO 273

protoinfo-tcp (``nest``)
~~~~~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-protoinfo-tcp-attrs`
:doc: conntrack tcp state information


.. LINENO 278

protoinfo-dccp (``nest``)
~~~~~~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-protoinfo-dccp-attrs`
:doc: conntrack dccp state information


.. LINENO 283

protoinfo-sctp (``nest``)
~~~~~~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-protoinfo-sctp-attrs`
:doc: conntrack sctp state information


.. _conntrack-attribute-set-help-attrs:

help-attrs
==========
.. LINENO 291

help-name (``string``)
~~~~~~~~~~~~~~~~~~~~~~
:doc: helper name


.. _conntrack-attribute-set-nat-proto-attrs:

nat-proto-attrs
===============
.. LINENO 298

nat-port-min (``u16``)
~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 302

nat-port-max (``u16``)
~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. _conntrack-attribute-set-nat-attrs:

nat-attrs
=========
.. LINENO 309

nat-v4-minip (``u32``)
~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 313

nat-v4-maxip (``u32``)
~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 317

nat-v6-minip (``binary``)
~~~~~~~~~~~~~~~~~~~~~~~~~


.. LINENO 320

nat-v6-maxip (``binary``)
~~~~~~~~~~~~~~~~~~~~~~~~~


.. LINENO 323

nat-proto (``nest``)
~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-nat-proto-attrs`


.. _conntrack-attribute-set-seqadj-attrs:

seqadj-attrs
============
.. LINENO 330

correction-pos (``u32``)
~~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 334

offset-before (``u32``)
~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 338

offset-after (``u32``)
~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. _conntrack-attribute-set-secctx-attrs:

secctx-attrs
============
.. LINENO 345

secctx-name (``string``)
~~~~~~~~~~~~~~~~~~~~~~~~


.. _conntrack-attribute-set-synproxy-attrs:

synproxy-attrs
==============
.. LINENO 351

isn (``u32``)
~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 355

its (``u32``)
~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 359

tsoff (``u32``)
~~~~~~~~~~~~~~~
:byte-order: big-endian


.. _conntrack-attribute-set-conntrack-attrs:

conntrack-attrs
===============
.. LINENO 366

tuple-orig (``nest``)
~~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-tuple-attrs`
:doc: conntrack l3+l4 protocol information, original direction


.. LINENO 371

tuple-reply (``nest``)
~~~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-tuple-attrs`
:doc: conntrack l3+l4 protocol information, reply direction


.. LINENO 376

status (``u32``)
~~~~~~~~~~~~~~~~
:byte-order: big-endian
:enum: :ref:`conntrack-definition-nf-ct-status`
:enum-as-flags: True
:doc: conntrack flag bits


.. LINENO 383

protoinfo (``nest``)
~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-protoinfo-attrs`


.. LINENO 387

help (``nest``)
~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-help-attrs`


.. LINENO 391

nat-src (``nest``)
~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-nat-attrs`


.. LINENO 395

timeout (``u32``)
~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 399

mark (``u32``)
~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 403

counters-orig (``nest``)
~~~~~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-counter-attrs`


.. LINENO 407

counters-reply (``nest``)
~~~~~~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-counter-attrs`


.. LINENO 411

use (``u32``)
~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 415

id (``u32``)
~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 419

nat-dst (``nest``)
~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-nat-attrs`


.. LINENO 423

tuple-master (``nest``)
~~~~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-tuple-attrs`


.. LINENO 427

seq-adj-orig (``nest``)
~~~~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-seqadj-attrs`


.. LINENO 431

seq-adj-reply (``nest``)
~~~~~~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-seqadj-attrs`


.. LINENO 435

secmark (``binary``)
~~~~~~~~~~~~~~~~~~~~
:doc: obsolete


.. LINENO 439

zone (``u16``)
~~~~~~~~~~~~~~
:byte-order: big-endian
:doc: conntrack zone id


.. LINENO 444

secctx (``nest``)
~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-secctx-attrs`


.. LINENO 448

timestamp (``u64``)
~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 452

mark-mask (``u32``)
~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 456

labels (``binary``)
~~~~~~~~~~~~~~~~~~~


.. LINENO 459

labels mask (``binary``)
~~~~~~~~~~~~~~~~~~~~~~~~


.. LINENO 462

synproxy (``nest``)
~~~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-synproxy-attrs`


.. LINENO 466

filter (``nest``)
~~~~~~~~~~~~~~~~~
:nested-attributes: :ref:`conntrack-attribute-set-tuple-attrs`


.. LINENO 470

status-mask (``u32``)
~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:enum: :ref:`conntrack-definition-nf-ct-status`
:enum-as-flags: True
:doc: conntrack flag bits to change


.. LINENO 477

timestamp-event (``u64``)
~~~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. _conntrack-attribute-set-conntrack-stats-attrs:

conntrack-stats-attrs
=====================
.. LINENO 484

searched (``u32``)
~~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:doc: obsolete


.. LINENO 489

found (``u32``)
~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 493

new (``u32``)
~~~~~~~~~~~~~
:byte-order: big-endian
:doc: obsolete


.. LINENO 498

invalid (``u32``)
~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:doc: obsolete


.. LINENO 503

ignore (``u32``)
~~~~~~~~~~~~~~~~
:byte-order: big-endian
:doc: obsolete


.. LINENO 508

delete (``u32``)
~~~~~~~~~~~~~~~~
:byte-order: big-endian
:doc: obsolete


.. LINENO 513

delete-list (``u32``)
~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian
:doc: obsolete


.. LINENO 518

insert (``u32``)
~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 522

insert-failed (``u32``)
~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 526

drop (``u32``)
~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 530

early-drop (``u32``)
~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 534

error (``u32``)
~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 538

search-restart (``u32``)
~~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 542

clash-resolve (``u32``)
~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian


.. LINENO 546

chain-toolong (``u32``)
~~~~~~~~~~~~~~~~~~~~~~~
:byte-order: big-endian