ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: usr / include / linux / netfilter

#ifndef _NF_CONNTRACK_TCP_H
#define _NF_CONNTRACK_TCP_H
/* TCP tracking. */

#include <linux/types.h>

/* This is exposed to userspace (ctnetlink) */
enum tcp_conntrack {
	TCP_CONNTRACK_NONE,
	TCP_CONNTRACK_SYN_SENT,
	TCP_CONNTRACK_SYN_RECV,
	TCP_CONNTRACK_ESTABLISHED,
	TCP_CONNTRACK_FIN_WAIT,
	TCP_CONNTRACK_CLOSE_WAIT,
	TCP_CONNTRACK_LAST_ACK,
	TCP_CONNTRACK_TIME_WAIT,
	TCP_CONNTRACK_CLOSE,
	TCP_CONNTRACK_LISTEN,	/* obsolete */
#define TCP_CONNTRACK_SYN_SENT2	TCP_CONNTRACK_LISTEN
	TCP_CONNTRACK_MAX,
	TCP_CONNTRACK_IGNORE,
	TCP_CONNTRACK_RETRANS,
	TCP_CONNTRACK_UNACK,
	TCP_CONNTRACK_TIMEOUT_MAX
};

/* Window scaling is advertised by the sender */
#define IP_CT_TCP_FLAG_WINDOW_SCALE		0x01

/* SACK is permitted by the sender */
#define IP_CT_TCP_FLAG_SACK_PERM		0x02

/* This sender sent FIN first */
#define IP_CT_TCP_FLAG_CLOSE_INIT		0x04

/* Be liberal in window checking */
#define IP_CT_TCP_FLAG_BE_LIBERAL		0x08

/* Has unacknowledged data */
#define IP_CT_TCP_FLAG_DATA_UNACKNOWLEDGED	0x10

/* The field td_maxack has been set */
#define IP_CT_TCP_FLAG_MAXACK_SET		0x20

/* Marks possibility for expected RFC5961 challenge ACK */
#define IP_CT_EXP_CHALLENGE_ACK 		0x40

struct nf_ct_tcp_flags {
	__u8 flags;
	__u8 mask;
};

#endif /* _NF_CONNTRACK_TCP_H */

[-] xt_helper.h [edit]
[-] xt_HMARK.h [edit]
[-] xt_time.h [edit]
[-] xt_dccp.h [edit]
[-] xt_IDLETIMER.h [edit]
[-] xt_recent.h [edit]
[-] nfnetlink_acct.h [edit]
[-] xt_mac.h [edit]
[-] xt_rateest.h [edit]
[-] x_tables.h [edit]
[-] xt_mark.h [edit]
[-] xt_devgroup.h [edit]
[-] xt_connlimit.h [edit]
[-] nf_conntrack_ftp.h [edit]
[-] nfnetlink_cthelper.h [edit]
[+] ..
[-] xt_u32.h [edit]
[-] xt_rpfilter.h [edit]
[-] nf_tables_compat.h [edit]
[-] xt_policy.h [edit]
[-] xt_CLASSIFY.h [edit]
[-] xt_quota.h [edit]
[-] xt_TCPOPTSTRIP.h [edit]
[-] xt_comment.h [edit]
[-] xt_sctp.h [edit]
[-] xt_tcpudp.h [edit]
[-] xt_tcpmss.h [edit]
[-] xt_nfacct.h [edit]
[-] xt_TCPMSS.h [edit]
[-] xt_length.h [edit]
[-] xt_connlabel.h [edit]
[-] xt_cpu.h [edit]
[-] xt_osf.h [edit]
[-] xt_bpf.h [edit]
[-] xt_hashlimit.h [edit]
[-] xt_NFLOG.h [edit]
[-] nfnetlink_conntrack.h [edit]
[-] xt_AUDIT.h [edit]
[-] xt_pkttype.h [edit]
[-] xt_set.h [edit]
[-] xt_string.h [edit]
[-] xt_ipvs.h [edit]
[-] xt_socket.h [edit]
[-] nf_tables.h [edit]
[-] xt_CONNSECMARK.h [edit]
[-] xt_CONNMARK.h [edit]
[-] xt_NFQUEUE.h [edit]
[-] nf_nat.h [edit]
[-] xt_connbytes.h [edit]
[-] xt_addrtype.h [edit]
[-] nfnetlink_log.h [edit]
[-] xt_LED.h [edit]
[-] xt_LOG.h [edit]
[-] xt_physdev.h [edit]
[-] xt_state.h [edit]
[-] xt_realm.h [edit]
[-] xt_SECMARK.h [edit]
[-] xt_ecn.h [edit]
[-] xt_cluster.h [edit]
[+] ipset
[-] xt_connmark.h [edit]
[-] xt_esp.h [edit]
[-] xt_TEE.h [edit]
[-] xt_owner.h [edit]
[-] nfnetlink_compat.h [edit]
[-] xt_cgroup.h [edit]
[-] xt_CHECKSUM.h [edit]
[-] xt_TPROXY.h [edit]
[-] xt_CT.h [edit]
[-] nf_conntrack_tcp.h [edit]
[-] xt_iprange.h [edit]
[-] nf_conntrack_sctp.h [edit]
[-] xt_DSCP.h [edit]
[-] nf_conntrack_common.h [edit]
[-] xt_MARK.h [edit]
[-] nfnetlink.h [edit]
[-] xt_conntrack.h [edit]
[-] nfnetlink_cttimeout.h [edit]
[-] xt_limit.h [edit]
[-] xt_RATEEST.h [edit]
[-] nfnetlink_queue.h [edit]
[-] nf_conntrack_tuple_common.h [edit]
[-] xt_dscp.h [edit]
[-] xt_statistic.h [edit]
[-] xt_multiport.h [edit]