conntrack-tools is a set of userspace tools for Linux that allow system administrators to interact with the Connection Tracking System, the module which provides stateful packet inspection for iptables. It includes the userspace daemon conntrackd and the commandline interface conntrack.
| Tags | Security Networking Firewalls Monitoring |
|---|---|
| Licenses | GPL v2 Or Later |
| Operating Systems | Linux |
| Implementation | C |
| Translations | English |
Recent releases


Release Notes: This release adds support to dump the "dying" and "unconfirmed" list via ctnetlink. A deadlock due to wrong nested signal blocking was resolved.


Release Notes: This release adds the user-space helper infrastructure, which includes the RPC portmapper (to support NFSv3) and Oracle*TNS helpers.


Release Notes: Selective flushing for the "-t" and "-F" command options has been implemented. The commit operation is now synchronous.


Release Notes: This release supports NAT expectations, synchronization of the expectation class, helper names, and expect functions. Filtering by mark is now allowed. Example configurations for Q.931 and H.245 have been added.


Release Notes: Support for mark masks was added.