cregit-Linux how code gets into the kernel

Release 4.8 net/netfilter/nf_conntrack_standalone.c

Directory: net/netfilter
/* (C) 1999-2001 Paul `Rusty' Russell
 * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
 * (C) 2005-2012 Patrick McHardy <kaber@trash.net>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <linux/types.h>
#include <linux/netfilter.h>
#include <linux/slab.h>
#include <linux/module.h>
#include <linux/skbuff.h>
#include <linux/proc_fs.h>
#include <linux/seq_file.h>
#include <linux/percpu.h>
#include <linux/netdevice.h>
#include <linux/security.h>
#include <net/net_namespace.h>
#ifdef CONFIG_SYSCTL
#include <linux/sysctl.h>
#endif

#include <net/netfilter/nf_conntrack.h>
#include <net/netfilter/nf_conntrack_core.h>
#include <net/netfilter/nf_conntrack_l3proto.h>
#include <net/netfilter/nf_conntrack_l4proto.h>
#include <net/netfilter/nf_conntrack_expect.h>
#include <net/netfilter/nf_conntrack_helper.h>
#include <net/netfilter/nf_conntrack_acct.h>
#include <net/netfilter/nf_conntrack_zones.h>
#include <net/netfilter/nf_conntrack_timestamp.h>
#include <linux/rculist_nulls.h>

MODULE_LICENSE("GPL");

#ifdef CONFIG_NF_CONNTRACK_PROCFS

void print_tuple(struct seq_file *s, const struct nf_conntrack_tuple *tuple, const struct nf_conntrack_l3proto *l3proto, const struct nf_conntrack_l4proto *l4proto) { l3proto->print_tuple(s, tuple); l4proto->print_tuple(s, tuple); }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai3882.61%125.00%
joe perchesjoe perches36.52%125.00%
martin josefssonmartin josefsson36.52%125.00%
jan engelhardtjan engelhardt24.35%125.00%
Total46100.00%4100.00%

EXPORT_SYMBOL_GPL(print_tuple); struct ct_iter_state { struct seq_net_private p; struct hlist_nulls_head *hash; unsigned int htable_size; unsigned int bucket; u_int64_t time_now; };
static struct hlist_nulls_node *ct_get_first(struct seq_file *seq) { struct ct_iter_state *st = seq->private; struct hlist_nulls_node *n; for (st->bucket = 0; st->bucket < st->htable_size; st->bucket++) { n = rcu_dereference( hlist_nulls_first_rcu(&st->hash[st->bucket])); if (!is_a_nulls(n)) return n; } return NULL; }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai5465.85%120.00%
patrick mchardypatrick mchardy1214.63%120.00%
eric dumazeteric dumazet1012.20%240.00%
liping zhangliping zhang67.32%120.00%
Total82100.00%5100.00%


static struct hlist_nulls_node *ct_get_next(struct seq_file *seq, struct hlist_nulls_node *head) { struct ct_iter_state *st = seq->private; head = rcu_dereference(hlist_nulls_next_rcu(head)); while (is_a_nulls(head)) { if (likely(get_nulls_value(head) == st->bucket)) { if (++st->bucket >= st->htable_size) return NULL; } head = rcu_dereference( hlist_nulls_first_rcu(&st->hash[st->bucket])); } return head; }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai5859.79%120.00%
eric dumazeteric dumazet2727.84%240.00%
patrick mchardypatrick mchardy66.19%120.00%
liping zhangliping zhang66.19%120.00%
Total97100.00%5100.00%


static struct hlist_nulls_node *ct_get_idx(struct seq_file *seq, loff_t pos) { struct hlist_nulls_node *head = ct_get_first(seq); if (head) while (pos && (head = ct_get_next(seq, head))) pos--; return pos ? NULL : head; }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai5396.36%150.00%
eric dumazeteric dumazet23.64%150.00%
Total55100.00%2100.00%


static void *ct_seq_start(struct seq_file *seq, loff_t *pos) __acquires (RCU) { struct ct_iter_state *st = seq->private; st->time_now = ktime_get_real_ns(); rcu_read_lock(); nf_conntrack_get_ht(&st->hash, &st->htable_size); return ct_get_idx(seq, *pos); }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai2642.62%116.67%
pablo neira ayusopablo neira ayuso1524.59%116.67%
liping zhangliping zhang1321.31%116.67%
stephen hemmingerstephen hemminger34.92%116.67%
patrick mchardypatrick mchardy34.92%116.67%
eric dumazeteric dumazet11.64%116.67%
Total61100.00%6100.00%


static void *ct_seq_next(struct seq_file *s, void *v, loff_t *pos) { (*pos)++; return ct_get_next(s, v); }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai34100.00%1100.00%
Total34100.00%1100.00%


static void ct_seq_stop(struct seq_file *s, void *v) __releases (RCU) { rcu_read_unlock(); }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai1672.73%133.33%
stephen hemmingerstephen hemminger313.64%133.33%
patrick mchardypatrick mchardy313.64%133.33%
Total22100.00%3100.00%

#ifdef CONFIG_NF_CONNTRACK_SECMARK
static void ct_show_secctx(struct seq_file *s, const struct nf_conn *ct) { int ret; u32 len; char *secctx; ret = security_secid_to_secctx(ct->secmark, &secctx, &len); if (ret) return; seq_printf(s, "secctx=%s ", secctx); security_release_secctx(secctx, len); }

Contributors

PersonTokensPropCommitsCommitProp
eric pariseric paris6196.83%150.00%
steven rostedtsteven rostedt23.17%150.00%
Total63100.00%2100.00%

#else
static inline void ct_show_secctx(struct seq_file *s, const struct nf_conn *ct) { }

Contributors

PersonTokensPropCommitsCommitProp
eric pariseric paris1588.24%150.00%
steven rostedtsteven rostedt211.76%150.00%
Total17100.00%2100.00%

#endif #ifdef CONFIG_NF_CONNTRACK_ZONES
static void ct_show_zone(struct seq_file *s, const struct nf_conn *ct, int dir) { const struct nf_conntrack_zone *zone = nf_ct_zone(ct); if (zone->dir != dir) return; switch (zone->dir) { case NF_CT_DEFAULT_ZONE_DIR: seq_printf(s, "zone=%u ", zone->id); break; case NF_CT_ZONE_DIR_ORIG: seq_printf(s, "zone-orig=%u ", zone->id); break; case NF_CT_ZONE_DIR_REPL: seq_printf(s, "zone-reply=%u ", zone->id); break; default: break; } }

Contributors

PersonTokensPropCommitsCommitProp
daniel borkmanndaniel borkmann95100.00%2100.00%
Total95100.00%2100.00%

#else
static inline void ct_show_zone(struct seq_file *s, const struct nf_conn *ct, int dir) { }

Contributors

PersonTokensPropCommitsCommitProp
daniel borkmanndaniel borkmann20100.00%2100.00%
Total20100.00%2100.00%

#endif #ifdef CONFIG_NF_CONNTRACK_TIMESTAMP
static void ct_show_delta_time(struct seq_file *s, const struct nf_conn *ct) { struct ct_iter_state *st = s->private; struct nf_conn_tstamp *tstamp; s64 delta_time; tstamp = nf_conn_tstamp_find(ct); if (tstamp) { delta_time = st->time_now - tstamp->start; if (delta_time > 0) delta_time = div_s64(delta_time, NSEC_PER_SEC); else delta_time = 0; seq_printf(s, "delta-time=%llu ", (unsigned long long)delta_time); } return; }

Contributors

PersonTokensPropCommitsCommitProp
pablo neira ayusopablo neira ayuso5964.13%133.33%
patrick mchardypatrick mchardy3032.61%133.33%
steven rostedtsteven rostedt33.26%133.33%
Total92100.00%3100.00%

#else
static inline void ct_show_delta_time(struct seq_file *s, const struct nf_conn *ct) { }

Contributors

PersonTokensPropCommitsCommitProp
pablo neira ayusopablo neira ayuso1588.24%150.00%
steven rostedtsteven rostedt211.76%150.00%
Total17100.00%2100.00%

#endif /* return 0 on success, 1 in case of error */
static int ct_seq_show(struct seq_file *s, void *v) { struct nf_conntrack_tuple_hash *hash = v; struct nf_conn *ct = nf_ct_tuplehash_to_ctrack(hash); const struct nf_conntrack_l3proto *l3proto; const struct nf_conntrack_l4proto *l4proto; struct net *net = seq_file_net(s); int ret = 0; NF_CT_ASSERT(ct); if (unlikely(!atomic_inc_not_zero(&ct->ct_general.use))) return 0; /* we only want to print DIR_ORIGINAL */ if (NF_CT_DIRECTION(hash)) goto release; if (!net_eq(nf_ct_net(ct), net)) goto release; l3proto = __nf_ct_l3proto_find(nf_ct_l3num(ct)); NF_CT_ASSERT(l3proto); l4proto = __nf_ct_l4proto_find(nf_ct_l3num(ct), nf_ct_protonum(ct)); NF_CT_ASSERT(l4proto); ret = -ENOSPC; seq_printf(s, "%-8s %u %-8s %u %ld ", l3proto->name, nf_ct_l3num(ct), l4proto->name, nf_ct_protonum(ct), timer_pending(&ct->timeout) ? (long)(ct->timeout.expires - jiffies)/HZ : 0); if (l4proto->print_conntrack) l4proto->print_conntrack(s, ct); print_tuple(s, &ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple, l3proto, l4proto); ct_show_zone(s, ct, NF_CT_ZONE_DIR_ORIG); if (seq_has_overflowed(s)) goto release; if (seq_print_acct(s, ct, IP_CT_DIR_ORIGINAL)) goto release; if (!(test_bit(IPS_SEEN_REPLY_BIT, &ct->status))) seq_printf(s, "[UNREPLIED] "); print_tuple(s, &ct->tuplehash[IP_CT_DIR_REPLY].tuple, l3proto, l4proto); ct_show_zone(s, ct, NF_CT_ZONE_DIR_REPL); if (seq_print_acct(s, ct, IP_CT_DIR_REPLY)) goto release; if (test_bit(IPS_ASSURED_BIT, &ct->status)) seq_printf(s, "[ASSURED] "); if (seq_has_overflowed(s)) goto release; #if defined(CONFIG_NF_CONNTRACK_MARK) seq_printf(s, "mark=%u ", ct->mark); #endif ct_show_secctx(s, ct); ct_show_zone(s, ct, NF_CT_DEFAULT_ZONE_DIR); ct_show_delta_time(s, ct); seq_printf(s, "use=%u\n", atomic_read(&ct->ct_general.use)); if (seq_has_overflowed(s)) goto release; ret = 0; release: nf_ct_put(ct); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai23753.50%15.00%
eric dumazeteric dumazet5512.42%15.00%
patrick mchardypatrick mchardy429.48%420.00%
steven rostedtsteven rostedt327.22%210.00%
liping zhangliping zhang265.87%15.00%
daniel borkmanndaniel borkmann214.74%210.00%
martin josefssonmartin josefsson92.03%15.00%
pablo neira ayusopablo neira ayuso71.58%210.00%
james morrisjames morris40.90%15.00%
krzysztof piotr oledzkikrzysztof piotr oledzki40.90%15.00%
jan engelhardtjan engelhardt20.45%15.00%
joe perchesjoe perches20.45%15.00%
eric pariseric paris10.23%15.00%
david s. millerdavid s. miller10.23%15.00%
Total443100.00%20100.00%

static const struct seq_operations ct_seq_ops = { .start = ct_seq_start, .next = ct_seq_next, .stop = ct_seq_stop, .show = ct_seq_show };
static int ct_open(struct inode *inode, struct file *file) { return seq_open_net(inode, file, &ct_seq_ops, sizeof(struct ct_iter_state)); }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai2575.76%133.33%
pavel emelianovpavel emelianov515.15%133.33%
alexey dobriyanalexey dobriyan39.09%133.33%
Total33100.00%3100.00%

static const struct file_operations ct_file_ops = { .owner = THIS_MODULE, .open = ct_open, .read = seq_read, .llseek = seq_lseek, .release = seq_release_net, };
static void *ct_cpu_seq_start(struct seq_file *seq, loff_t *pos) { struct net *net = seq_file_net(seq); int cpu; if (*pos == 0) return SEQ_START_TOKEN; for (cpu = *pos-1; cpu < nr_cpu_ids; ++cpu) { if (!cpu_possible(cpu)) continue; *pos = cpu + 1; return per_cpu_ptr(net->ct.stat, cpu); } return NULL; }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai7180.68%125.00%
alexey dobriyanalexey dobriyan1618.18%250.00%
rusty russellrusty russell11.14%125.00%
Total88100.00%4100.00%


static void *ct_cpu_seq_next(struct seq_file *seq, void *v, loff_t *pos) { struct net *net = seq_file_net(seq); int cpu; for (cpu = *pos; cpu < nr_cpu_ids; ++cpu) { if (!cpu_possible(cpu)) continue; *pos = cpu + 1; return per_cpu_ptr(net->ct.stat, cpu); } return NULL; }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai6378.75%125.00%
alexey dobriyanalexey dobriyan1620.00%250.00%
rusty russellrusty russell11.25%125.00%
Total80100.00%4100.00%


static void ct_cpu_seq_stop(struct seq_file *seq, void *v) { }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai14100.00%1100.00%
Total14100.00%1100.00%


static int ct_cpu_seq_show(struct seq_file *seq, void *v) { struct net *net = seq_file_net(seq); unsigned int nr_conntracks = atomic_read(&net->ct.count); const struct ip_conntrack_stat *st = v; if (v == SEQ_START_TOKEN) { seq_printf(seq, "entries searched found new invalid ignore delete delete_list insert insert_failed drop early_drop icmp_error expect_new expect_create expect_delete search_restart\n"); return 0; } seq_printf(seq, "%08x %08x %08x %08x %08x %08x %08x %08x " "%08x %08x %08x %08x %08x %08x %08x %08x %08x\n", nr_conntracks, st->searched, st->found, st->new, st->invalid, st->ignore, st->delete, st->delete_list, st->insert, st->insert_failed, st->drop, st->early_drop, st->error, st->expect_new, st->expect_create, st->expect_delete, st->search_restart ); return 0; }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai12084.51%120.00%
alexey dobriyanalexey dobriyan1510.56%240.00%
jesper dangaard brouerjesper dangaard brouer64.23%120.00%
jan engelhardtjan engelhardt10.70%120.00%
Total142100.00%5100.00%

static const struct seq_operations ct_cpu_seq_ops = { .start = ct_cpu_seq_start, .next = ct_cpu_seq_next, .stop = ct_cpu_seq_stop, .show = ct_cpu_seq_show, };
static int ct_cpu_seq_open(struct inode *inode, struct file *file) { return seq_open_net(inode, file, &ct_cpu_seq_ops, sizeof(struct seq_net_private)); }

Contributors

PersonTokensPropCommitsCommitProp
yasuyuki kozakaiyasuyuki kozakai2472.73%150.00%
alexey dobriyanalexey dobriyan927.27%150.00%
Total33100.00%2100.00%

static const struct file_operations ct_cpu_seq_fops = { .owner = THIS_MODULE, .open = ct_cpu_seq_open, .read = seq_read, .llseek = seq_lseek, .release = seq_release_net, };
static int nf_conntrack_standalone_init_proc(struct net *net) { struct proc_dir_entry *pde; kuid_t root_uid; kgid_t root_gid; pde = proc_create("nf_conntrack", 0440, net->proc_net, &ct_file_ops); if (!pde) goto out_nf_conntrack; root_uid = make_kuid(net->user_ns, 0); root_gid = make_kgid(net->user_ns, 0); if (uid_valid(root_uid) && gid_valid(root_gid)) proc_set_user(pde, root_uid, root_gid); pde = proc_create("nf_conntrack", S_IRUGO, net->proc_net_stat, &ct_cpu_seq_fops); if (!pde) goto out_stat_nf_conntrack; return 0; out_stat_nf_conntrack: remove_proc_entry("nf_conntrack", net->proc_net); out_nf_conntrack: return -ENOMEM; }

Contributors

PersonTokensPropCommitsCommitProp
alexey dobriyanalexey dobriyan7052.63%233.33%
philip whinerayphilip whineray4936.84%116.67%
gao fenggao feng107.52%233.33%
denis v. lunevdenis v. lunev43.01%116.67%
Total133100.00%6100.00%


static void nf_conntrack_standalone_fini_proc(struct net *net) { remove_proc_entry("nf_conntrack", net->proc_net_stat); remove_proc_entry("nf_conntrack", net->proc_net); }

Contributors

PersonTokensPropCommitsCommitProp
alexey dobriyanalexey dobriyan2482.76%266.67%
gao fenggao feng517.24%133.33%
Total29100.00%3100.00%

#else
static int nf_conntrack_standalone_init_proc(struct net *net) { return 0; }

Contributors

PersonTokensPropCommitsCommitProp
alexey dobriyanalexey dobriyan14100.00%2100.00%
Total14100.00%2100.00%


static void nf_conntrack_standalone_fini_proc(struct net *net) { }

Contributors

PersonTokensPropCommitsCommitProp
alexey dobriyanalexey dobriyan10100.00%2100.00%
Total10100.00%2100.00%

#endif /* CONFIG_NF_CONNTRACK_PROCFS */ /* Sysctl support */ #ifdef CONFIG_SYSCTL /* Log invalid packets of a given protocol */ static int log_invalid_proto_min __read_mostly; static int log_invalid_proto_max __read_mostly = 255; /* size the user *wants to set */ static unsigned int nf_conntrack_htable_size_user __read_mostly;
static int nf_conntrack_hash_sysctl(struct ctl_table *table, int write, void __user *buffer, size_t *lenp, loff_t *ppos) { int ret; ret = proc_dointvec(table, write, buffer, lenp, ppos); if (ret < 0 || !write) return ret; /* update ret, we might not be able to satisfy request */ ret = nf_conntrack_hash_resize(nf_conntrack_htable_size_user); /* update it to the actual value used by conntrack */ nf_conntrack_htable_size_user = nf_conntrack_htable_size; return ret; }

Contributors

PersonTokensPropCommitsCommitProp
florian westphalflorian westphal73100.00%1100.00%
Total73100.00%1100.00%

static struct ctl_table_header *nf_ct_netfilter_header; static struct ctl_table nf_ct_sysctl_table[] = { { .procname = "nf_conntrack_max", .data = &nf_conntrack_max, .maxlen = sizeof(int), .mode = 0644, .proc_handler = proc_dointvec, }, { .procname = "nf_conntrack_count", .data = &init_net.ct.count, .maxlen = sizeof(int), .mode = 0444, .proc_handler = proc_dointvec, }, { .procname = "nf_conntrack_buckets", .data = &nf_conntrack_htable_size_user, .maxlen = sizeof(unsigned int), .mode = 0644, .proc_handler = nf_conntrack_hash_sysctl, }, { .procname = "nf_conntrack_checksum", .data = &init_net.ct.sysctl_checksum, .maxlen = sizeof(unsigned int), .mode = 0644, .proc_handler = proc_dointvec, }, { .procname = "nf_conntrack_log_invalid", .data = &init_net.ct.sysctl_log_invalid, .maxlen = sizeof(unsigned int), .mode = 0644, .proc_handler = proc_dointvec_minmax, .extra1 = &log_invalid_proto_min, .extra2 = &log_invalid_proto_max, }, { .procname = "nf_conntrack_expect_max", .data = &nf_ct_expect_max, .maxlen = sizeof(int), .mode = 0644, .proc_handler = proc_dointvec, }, { } }; static struct ctl_table nf_ct_netfilter_table[] = { { .procname = "nf_conntrack_max", .data = &nf_conntrack_max, .maxlen = sizeof(int), .mode = 0644, .proc_handler = proc_dointvec, }, { } };
static int nf_conntrack_standalone_init_sysctl(struct net *net) { struct ctl_table *table; table = kmemdup(nf_ct_sysctl_table, sizeof(nf_ct_sysctl_table), GFP_KERNEL); if (!table) goto out_kmemdup; table[1].data = &net->ct.count; table[3].data = &net->ct.sysctl_checksum; table[4].data = &net->ct.sysctl_log_invalid; /* Don't export sysctls to unprivileged users */ if (net->user_ns != &init_user_ns) table[0].procname = NULL; if (!net_eq(&init_net, net)) table[2].mode = 0444; net->ct.sysctl_header = register_net_sysctl(net, "net/netfilter", table); if (!net->ct.sysctl_header) goto out_unregister_netfilter; return 0; out_unregister_netfilter: kfree(table); out_kmemdup: return -ENOMEM; }

Contributors

PersonTokensPropCommitsCommitProp
alexey dobriyanalexey dobriyan10464.20%450.00%
eric w. biedermaneric w. biederman2112.96%225.00%
florian westphalflorian westphal2012.35%112.50%
krzysztof piotr oledzkikrzysztof piotr oledzki1710.49%112.50%
Total162100.00%8100.00%


static void nf_conntrack_standalone_fini_sysctl(struct net *net) { struct ctl_table *table; table = net->ct.sysctl_header->ctl_table_arg; unregister_net_sysctl_table(net->ct.sysctl_header); kfree(table); }

Contributors

PersonTokensPropCommitsCommitProp
alexey dobriyanalexey dobriyan3997.50%266.67%
krzysztof piotr oledzkikrzysztof piotr oledzki12.50%133.33%
Total40100.00%3100.00%

#else
static int nf_conntrack_standalone_init_sysctl(struct net *net) { return 0; }

Contributors

PersonTokensPropCommitsCommitProp
alexey dobriyanalexey dobriyan14100.00%2100.00%
Total14100.00%2100.00%


static void nf_conntrack_standalone_fini_sysctl(struct net *net) { }

Contributors

PersonTokensPropCommitsCommitProp
alexey dobriyanalexey dobriyan10100.00%2100.00%
Total10100.00%2100.00%

#endif /* CONFIG_SYSCTL */
static int nf_conntrack_pernet_init(struct net *net) { int ret; ret = nf_conntrack_init_net(net); if (ret < 0) goto out_init; ret = nf_conntrack_standalone_init_proc(net); if (ret < 0) goto out_proc; net->ct.sysctl_checksum = 1; net->ct.sysctl_log_invalid = 0; ret = nf_conntrack_standalone_init_sysctl(net); if (ret < 0) goto out_sysctl; return 0; out_sysctl: nf_conntrack_standalone_fini_proc(net); out_proc: nf_conntrack_cleanup_net(net); out_init: return ret; }

Contributors

PersonTokensPropCommitsCommitProp
alexey dobriyanalexey dobriyan9797.00%583.33%
gao fenggao feng33.00%116.67%
Total100100.00%6100.00%


static void nf_conntrack_pernet_exit(struct list_head *net_exit_list) { struct net *net; list_for_each_entry(net, net_exit_list, exit_list) { nf_conntrack_standalone_fini_sysctl(net); nf_conntrack_standalone_fini_proc(net); } nf_conntrack_cleanup_net_list(net_exit_list); }

Contributors

PersonTokensPropCommitsCommitProp
alexey dobriyanalexey dobriyan2253.66%360.00%
vladimir davydovvladimir davydov1843.90%120.00%
gao fenggao feng12.44%120.00%
Total41100.00%5100.00%

static struct pernet_operations nf_conntrack_net_ops = { .init = nf_conntrack_pernet_init, .exit_batch = nf_conntrack_pernet_exit, };
static int __init nf_conntrack_standalone_init(void) { int ret = nf_conntrack_init_start(); if (ret < 0) goto out_start; #ifdef CONFIG_SYSCTL nf_ct_netfilter_header = register_net_sysctl(&init_net, "net", nf_ct_netfilter_table); if (!nf_ct_netfilter_header) { pr_err("nf_conntrack: can't register to sysctl.\n")