Scroll to navigation

NFCT(8) NFCT(8)

NAME

nfct - command line tool to configure with the connection tracking system

SYNOPSIS

nfct command subsystem [parameters]

DESCRIPTION

nfct is the command line tool that allows you to configure the Connection Tracking System.

COMMANDS

List the existing objects.
Add new object.
Delete an object.
Get an existing object.
Flush the accounting object table.
This command is for the helper subsystem. It allows you to disable enqueueing packets to userspace for helper inspection.
This command is for the timeout subsystem. It allows you to set default protocol timeouts.
This command is for the timeout subsystem. It allows you to get the default protocol timeouts.

SUBSYS

By the time this manpage has been written, the supported subsystems are timeout and helper.

The timeout subsystem allows you to define fine-grain timeout policies.
The helper subsystem allows you to configure userspace helpers.
Displays the version information.
Displays the help message.

EXAMPLE

[UPDATE] tcp 6 100 ESTABLISHED src=192.168.39.100 dst=57.126.1.20 sport=56463 dport=80 src=57.126.1.20 dst=192.168.39.100 sport=80 dport=56463 [ASSURED]

SEE ALSO

iptables(8),conntrack(8)

BUGS

Please, report them to netfilter-devel@vger.kernel.org or file a bug in Netfilter's bugzilla (https://bugzilla.netfilter.org).

AUTHORS

Pablo Neira Ayuso wrote and maintains the nfct tool.

Man page written by Pablo Neira Ayuso <pablo@netfilter.org>.

February 29, 2012