Conntrack

Neuer Name

bei den contrack befehlen wurd ip durch nf für netfilter ersetzt

• neue convention

sysctl net.netfilter.nf_conntrack_count 
sysctl net.netfilter.nf_conntrack_max

hier stehen die einträge

 cat /proc/net/nf_conntrack

tool zum handlen

apt-get install conntrack

List connection tacking or expectation table

conntrack -L

Flush the whole given table

conntrack -F

Delete an entry with source 192.168.122.7 from table

conntrack -D -s 192.168.122.7

conntrack - command line interface for netfilter connection tracking

             This is the default table.  It contains a list of all  currently
             tracked  connections  through  the  system.
  
      conntrack -L [table] [-z]            List connection tacking or expectation table
      conntrack -G [table] parameters      Search for and show a particular (matching) entry in  the  given table.
      conntrack -D [table] paramaters      Delete an entry from the given table.
      conntrack -I [table] parameters      Create a new entry from the given table.
      conntrack -U [table] parameters      Update an entry from the given table.
      conntrack -E [table] parameters      Display a real-time event log.
      conntrack -F [table]                 Flush the whole given table
      conntrack -C [table]                 Show the table counter.
      conntrack -S                         Show the in-kernel connection tracking system statistics.

conntrack sip nat

• Links http://www.iptel.org/sipalg/

contrack helpers

• contrack helpers können für protokole benutzt werden die neue verbindungen öfnen wie sip oder ftp

• http://home.regit.org/wp-content/uploads/2011/11/secure-conntrack-helpers.html