summaryrefslogtreecommitdiff
path: root/conntrack.8
diff options
context:
space:
mode:
authorAlexander Wirt <formorer@debian.org>2014-09-19 10:15:13 +0200
committerAlexander Wirt <formorer@debian.org>2014-09-19 10:15:13 +0200
commit9f760e5d3f6b44ecf5bb7144517e022fd987fa76 (patch)
treea19ccbfccc5049ee3a8252725191af221f31b3ea /conntrack.8
parent6b61aefbf3de71852386f5f26d60c10ef62407d3 (diff)
downloadconntrack-tools-9f760e5d3f6b44ecf5bb7144517e022fd987fa76.tar.gz
conntrack-tools-9f760e5d3f6b44ecf5bb7144517e022fd987fa76.zip
Imported Upstream version 1.4.2
Diffstat (limited to 'conntrack.8')
-rw-r--r--conntrack.89
1 files changed, 8 insertions, 1 deletions
diff --git a/conntrack.8 b/conntrack.8
index a411fd4..f273434 100644
--- a/conntrack.8
+++ b/conntrack.8
@@ -88,11 +88,13 @@ Show the in-kernel connection tracking system statistics.
Atomically zero counters after reading them. This option is only valid in
combination with the "-L, --dump" command options.
.TP
-.BI "-o, --output [extended,xml,timestamp,id,ktimestamp] "
+.BI "-o, --output [extended,xml,timestamp,id,ktimestamp,labels] "
Display output in a certain format. With the extended output option, this tool
displays the layer 3 information. With ktimestamp, it displays the in-kernel
timestamp available since 2.6.38 (you can enable it via echo 1 >
/proc/sys/net/netfilter/nf_conntrack_timestamp).
+The labels output option tells conntrack to show the names of connection
+tracking labels that might be present.
.TP
.BI "-e, --event-mask " "[ALL|NEW|UPDATES|DESTROY][,...]"
Set the bitmask of events that are to be generated by the in-kernel ctnetlink
@@ -142,6 +144,11 @@ the MARK value into the ctmark.
Otherwise, the mask is logically ANDed with the existing mark before the comparision.
In "--create" mode, the mask is ignored.
.TP
+.BI "-l, --label " "LABEL,..."
+Specify the conntrack labels.
+This option is only available in conjunction with "-L, --dump" or "-E, --event".
+Match entries whose labels matches at least those specified as arguments.
+.TP
.BI "-c, --secmark " "SECMARK"
Specify the conntrack selinux security mark.
.TP