linux kernel - Conntrack on single interface - is it possible? -


i want use conntrack track per-connection bytes, packets etc. on end-host single network interface, rather connections through router multiple interfaces. means track connections terminate on host.

i have set conntrack on multiple linux distributions, , answer conntrack -l same: "0 flow entries have been shown".

is there way of tracking per-connection stats in way using conntrack or else on linux end-host?

conntrack best way stores tuple each connection. load necessary conntrack module in /lib/modules/xxx/kernel/net/netfilter/yyy.ko , /lib/modules/kernel/xxx/net/ipv4/netfilter/yyyy.ko though want connection pc end point conntrack tool work if necessary conntrack module installed.

another approach write kernel module , hook @ pre-routing want catch end-point , parse skbs fullfill requirements.


Comments

Popular posts from this blog

java - Suppress Jboss version details from HTTP error response -

gridview - Yii2 DataPorivider $totalSum for a column -

Sass watch command compiles .scss files before full sftp upload -