summaryrefslogtreecommitdiff
path: root/include/conntrackd.h
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2009-08-19 16:59:38 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2009-08-19 16:59:38 +0200
commit3e6852f806c4368eda451b39f12b2ac2f2b5d33b (patch)
treec4783baf3dec6aa3460e33426414e1da28a62b69 /include/conntrackd.h
parent32ca6a144903b2e6318ee61d1dda3f670d3c09da (diff)
downloadconntrack-tools-3e6852f806c4368eda451b39f12b2ac2f2b5d33b.tar.gz
conntrack-tools-3e6852f806c4368eda451b39f12b2ac2f2b5d33b.zip
conntrackd: add `DisableExternalCache' clause
This patch adds the clause `DisableExternalCache' that allows you to disable the external cache and to directly inject the entries into the kernel conntrack table. As a result, the CPU consumption of conntrackd increases. This clause can only be used with the FT-FW and the notrack synchronization modes, but not with the alarm mode. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/conntrackd.h')
-rw-r--r--include/conntrackd.h5
1 files changed, 4 insertions, 1 deletions
diff --git a/include/conntrackd.h b/include/conntrackd.h
index 907ce33..ce8f9d4 100644
--- a/include/conntrackd.h
+++ b/include/conntrackd.h
@@ -96,6 +96,9 @@ struct ct_conf {
int filter_from_kernelspace;
int event_iterations_limit;
struct {
+ int external_cache_disable;
+ } sync;
+ struct {
int events_reliable;
} netlink;
struct {
@@ -172,7 +175,7 @@ struct ct_general_state {
struct ct_sync_state {
struct cache *internal; /* internal events cache (netlink) */
- struct cache *external; /* external events cache (mcast) */
+ struct external_handler *external;
struct multichannel *channel;
struct nlif_handle *interface;