diff options
author | Clemence Faure <clemence.faure@sophos.com> | 2013-09-05 11:27:49 +0200 |
---|---|---|
committer | Florian Westphal <fw@strlen.de> | 2013-09-15 12:08:43 +0200 |
commit | 991fc4ae561bfc7c9bc9da9598b0cc704295811f (patch) | |
tree | c5465c2cc5b10d4500194a8ec586136c9549463d /conntrack.8 | |
parent | 06454c33f44c0f4d71a88a82b82da7bba5abde2d (diff) | |
download | conntrack-tools-991fc4ae561bfc7c9bc9da9598b0cc704295811f.tar.gz conntrack-tools-991fc4ae561bfc7c9bc9da9598b0cc704295811f.zip |
conntrack: support add/delete of conntrack labels
new options "--label-add" and "--label-delete" to alter connlabels
assigned to a connection.
Signed-off-by: Clemence Faure <clemence.faure@sophos.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'conntrack.8')
-rw-r--r-- | conntrack.8 | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/conntrack.8 b/conntrack.8 index 6410e5b..45e8582 100644 --- a/conntrack.8 +++ b/conntrack.8 @@ -146,9 +146,17 @@ In "--create" mode, the mask is ignored. .TP .BI "-l, --label " "LABEL" Specify a conntrack label. -This option is only available in conjunction with "-L, --dump" or "-E, --event". +This option is only available in conjunction with "-L, --dump", "-E, --event", or "-U --update". Match entries whose labels match at least those specified. Use multiple -l commands to specify multiple labels that need to be set. +Match entries whose labels matches at least those specified as arguments. +.BI "--label-add " "LABEL" +Specify the conntrack label to add to to the selected conntracks. +This option is only available in conjunction with "-I, --create" or "-U, --update". +.BI "--label-del " "[LABEL]" +Specify the conntrack label to delete from the selected conntracks. +If no label is given, all labels are deleted. +This option is only available in conjunction with "-U, --update". .TP .BI "-c, --secmark " "SECMARK" Specify the conntrack selinux security mark. |