summaryrefslogtreecommitdiff
path: root/conntrack.8
diff options
context:
space:
mode:
authorClemence Faure <clemence.faure@sophos.com>2013-09-05 11:27:49 +0200
committerFlorian Westphal <fw@strlen.de>2013-09-15 12:08:43 +0200
commit991fc4ae561bfc7c9bc9da9598b0cc704295811f (patch)
treec5465c2cc5b10d4500194a8ec586136c9549463d /conntrack.8
parent06454c33f44c0f4d71a88a82b82da7bba5abde2d (diff)
downloadconntrack-tools-991fc4ae561bfc7c9bc9da9598b0cc704295811f.tar.gz
conntrack-tools-991fc4ae561bfc7c9bc9da9598b0cc704295811f.zip
conntrack: support add/delete of conntrack labels
new options "--label-add" and "--label-delete" to alter connlabels assigned to a connection. Signed-off-by: Clemence Faure <clemence.faure@sophos.com> Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'conntrack.8')
-rw-r--r--conntrack.810
1 files changed, 9 insertions, 1 deletions
diff --git a/conntrack.8 b/conntrack.8
index 6410e5b..45e8582 100644
--- a/conntrack.8
+++ b/conntrack.8
@@ -146,9 +146,17 @@ In "--create" mode, the mask is ignored.
.TP
.BI "-l, --label " "LABEL"
Specify a conntrack label.
-This option is only available in conjunction with "-L, --dump" or "-E, --event".
+This option is only available in conjunction with "-L, --dump", "-E, --event", or "-U --update".
Match entries whose labels match at least those specified.
Use multiple -l commands to specify multiple labels that need to be set.
+Match entries whose labels matches at least those specified as arguments.
+.BI "--label-add " "LABEL"
+Specify the conntrack label to add to to the selected conntracks.
+This option is only available in conjunction with "-I, --create" or "-U, --update".
+.BI "--label-del " "[LABEL]"
+Specify the conntrack label to delete from the selected conntracks.
+If no label is given, all labels are deleted.
+This option is only available in conjunction with "-U, --update".
.TP
.BI "-c, --secmark " "SECMARK"
Specify the conntrack selinux security mark.