diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-08-21 19:18:38 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-08-26 20:43:55 +0200 |
| commit | dd73ceecdbe87b6ecf9e96643cd5326e520d7a1c (patch) | |
| tree | c4c3a7b933dde6bd9094abad606a9435256e383d /nfct.8 | |
| parent | 1c36d487cda8d1bed799b4daa28c44aa7198bb31 (diff) | |
| download | conntrack-tools-dd73ceecdbe87b6ecf9e96643cd5326e520d7a1c.tar.gz conntrack-tools-dd73ceecdbe87b6ecf9e96643cd5326e520d7a1c.zip | |
nfct: Update syntax to specify command before subsystem
This patch gets the nfct syntax in sync with nft so it looks like this:
nfct <add|delete|...> object ...
instead of:
nfct object <add|delete|...> ...
This patch retains backward compatibility so you can still use the old syntax.
The manpage and tests have been also updated to promote the adoption of this
syntax. We should have little existing clients of this tool as we can only use
this to configure the cttimeout and cthelper infrastructures.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'nfct.8')
| -rw-r--r-- | nfct.8 | 36 |
1 files changed, 20 insertions, 16 deletions
@@ -3,12 +3,26 @@ .\" Man page written by Pablo Neira Ayuso <pablo@netfilter.org> (Feb 2012) .SH NAME -nfct \- command line tool to interact with the connection tracking system +nfct \- command line tool to configure with the connection tracking system .SH SYNOPSIS -.BR "nfct subsystem command [parameters]" +.BR "nfct command subsystem [parameters]" .SH DESCRIPTION .B nfct -is the command line tool that allows you Netfilter's manipulate Connection Tracking System. +is the command line tool that allows to configure the Connection Tracking +System. +.SH COMMANDS +.TP +.BI "list " +List the existing objects. +.TP +.BI "add " +Add new object. +.TP +.BI "delete " +Delete an object. +.TP +.BI "get " +Get an existing object. .SH SUBSYS By the time this manpage has been written, the supported subsystem are .B timeout @@ -16,24 +30,14 @@ By the time this manpage has been written, the supported subsystem are .BI "timeout " The timeout subsystem allows you to define fine-grain timeout policies. .TP +.BI "helper " +The helper subsystem allows you to configure userspace helpers. +.TP .BI "version " Displays the version information. .TP .BI "help " Displays the help message. -.SH TIMEOUT SUBSYSTEM -.TP -.BI "list " -List the existing timeout policies. -.TP -.BI "add " -Add new timeout policy. -.TP -.BI "delete " -Delete timeout policy. -.TP -.BI "get " -Get existing timeout policy. .SH EXAMPLE .TP .B nfct timeout add test-tcp inet tcp established 100 close 10 close_wait 10 |