linux kernel - Conntrack on single interface - is it possible? -
i want use conntrack track per-connection bytes, packets etc. on end-host single network interface, rather connections through router multiple interfaces. means track connections terminate on host.
i have set conntrack on multiple linux distributions, , answer conntrack -l same: "0 flow entries have been shown".
is there way of tracking per-connection stats in way using conntrack or else on linux end-host?
conntrack best way stores tuple each connection. load necessary conntrack module in /lib/modules/xxx/kernel/net/netfilter/yyy.ko
, /lib/modules/kernel/xxx/net/ipv4/netfilter/yyyy.ko
though want connection pc end point conntrack tool work if necessary conntrack module installed.
another approach write kernel module , hook @ pre-routing want catch end-point , parse skbs fullfill requirements.
Comments
Post a Comment