1 /* This file contains all the functions required for the standalone
4 These are not required by the compatibility layer.
7 /* (C) 1999-2001 Paul `Rusty' Russell
8 * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
10 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License version 2 as
12 * published by the Free Software Foundation.
14 * 16 Dec 2003: Yasuyuki Kozakai @USAGI <yasuyuki.kozakai@toshiba.co.jp>
15 * - generalize L3 protocol dependent part.
17 * Derived from net/ipv4/netfilter/ip_conntrack_standalone.c
20 #include <linux/types.h>
21 #include <linux/netfilter.h>
22 #include <linux/module.h>
23 #include <linux/skbuff.h>
24 #include <linux/proc_fs.h>
25 #include <linux/seq_file.h>
26 #include <linux/percpu.h>
27 #include <linux/netdevice.h>
29 #include <linux/sysctl.h>
32 #include <net/netfilter/nf_conntrack.h>
33 #include <net/netfilter/nf_conntrack_core.h>
34 #include <net/netfilter/nf_conntrack_l3proto.h>
35 #include <net/netfilter/nf_conntrack_l4proto.h>
36 #include <net/netfilter/nf_conntrack_expect.h>
37 #include <net/netfilter/nf_conntrack_helper.h>
42 #define DEBUGP(format, args...)
45 MODULE_LICENSE("GPL");
49 print_tuple(struct seq_file
*s
, const struct nf_conntrack_tuple
*tuple
,
50 struct nf_conntrack_l3proto
*l3proto
,
51 struct nf_conntrack_l4proto
*l4proto
)
53 return l3proto
->print_tuple(s
, tuple
) || l4proto
->print_tuple(s
, tuple
);
56 #ifdef CONFIG_NF_CT_ACCT
58 seq_print_counters(struct seq_file
*s
,
59 const struct ip_conntrack_counter
*counter
)
61 return seq_printf(s
, "packets=%llu bytes=%llu ",
62 (unsigned long long)counter
->packets
,
63 (unsigned long long)counter
->bytes
);
66 #define seq_print_counters(x, y) 0
69 struct ct_iter_state
{
73 static struct list_head
*ct_get_first(struct seq_file
*seq
)
75 struct ct_iter_state
*st
= seq
->private;
78 st
->bucket
< nf_conntrack_htable_size
;
80 if (!list_empty(&nf_conntrack_hash
[st
->bucket
]))
81 return nf_conntrack_hash
[st
->bucket
].next
;
86 static struct list_head
*ct_get_next(struct seq_file
*seq
, struct list_head
*head
)
88 struct ct_iter_state
*st
= seq
->private;
91 while (head
== &nf_conntrack_hash
[st
->bucket
]) {
92 if (++st
->bucket
>= nf_conntrack_htable_size
)
94 head
= nf_conntrack_hash
[st
->bucket
].next
;
99 static struct list_head
*ct_get_idx(struct seq_file
*seq
, loff_t pos
)
101 struct list_head
*head
= ct_get_first(seq
);
104 while (pos
&& (head
= ct_get_next(seq
, head
)))
106 return pos
? NULL
: head
;
109 static void *ct_seq_start(struct seq_file
*seq
, loff_t
*pos
)
111 read_lock_bh(&nf_conntrack_lock
);
112 return ct_get_idx(seq
, *pos
);
115 static void *ct_seq_next(struct seq_file
*s
, void *v
, loff_t
*pos
)
118 return ct_get_next(s
, v
);
121 static void ct_seq_stop(struct seq_file
*s
, void *v
)
123 read_unlock_bh(&nf_conntrack_lock
);
126 /* return 0 on success, 1 in case of error */
127 static int ct_seq_show(struct seq_file
*s
, void *v
)
129 const struct nf_conntrack_tuple_hash
*hash
= v
;
130 const struct nf_conn
*conntrack
= nf_ct_tuplehash_to_ctrack(hash
);
131 struct nf_conntrack_l3proto
*l3proto
;
132 struct nf_conntrack_l4proto
*l4proto
;
134 NF_CT_ASSERT(conntrack
);
136 /* we only want to print DIR_ORIGINAL */
137 if (NF_CT_DIRECTION(hash
))
140 l3proto
= __nf_ct_l3proto_find(conntrack
->tuplehash
[IP_CT_DIR_ORIGINAL
]
143 NF_CT_ASSERT(l3proto
);
144 l4proto
= __nf_ct_l4proto_find(conntrack
->tuplehash
[IP_CT_DIR_ORIGINAL
]
146 conntrack
->tuplehash
[IP_CT_DIR_ORIGINAL
]
147 .tuple
.dst
.protonum
);
148 NF_CT_ASSERT(l4proto
);
150 if (seq_printf(s
, "%-8s %u %-8s %u %ld ",
152 conntrack
->tuplehash
[IP_CT_DIR_ORIGINAL
].tuple
.src
.l3num
,
154 conntrack
->tuplehash
[IP_CT_DIR_ORIGINAL
].tuple
.dst
.protonum
,
155 timer_pending(&conntrack
->timeout
)
156 ? (long)(conntrack
->timeout
.expires
- jiffies
)/HZ
: 0) != 0)
159 if (l3proto
->print_conntrack(s
, conntrack
))
162 if (l4proto
->print_conntrack(s
, conntrack
))
165 if (print_tuple(s
, &conntrack
->tuplehash
[IP_CT_DIR_ORIGINAL
].tuple
,
169 if (seq_print_counters(s
, &conntrack
->counters
[IP_CT_DIR_ORIGINAL
]))
172 if (!(test_bit(IPS_SEEN_REPLY_BIT
, &conntrack
->status
)))
173 if (seq_printf(s
, "[UNREPLIED] "))
176 if (print_tuple(s
, &conntrack
->tuplehash
[IP_CT_DIR_REPLY
].tuple
,
180 if (seq_print_counters(s
, &conntrack
->counters
[IP_CT_DIR_REPLY
]))
183 if (test_bit(IPS_ASSURED_BIT
, &conntrack
->status
))
184 if (seq_printf(s
, "[ASSURED] "))
187 #if defined(CONFIG_NF_CONNTRACK_MARK)
188 if (seq_printf(s
, "mark=%u ", conntrack
->mark
))
192 #ifdef CONFIG_NF_CONNTRACK_SECMARK
193 if (seq_printf(s
, "secmark=%u ", conntrack
->secmark
))
197 if (seq_printf(s
, "use=%u\n", atomic_read(&conntrack
->ct_general
.use
)))
203 static struct seq_operations ct_seq_ops
= {
204 .start
= ct_seq_start
,
210 static int ct_open(struct inode
*inode
, struct file
*file
)
212 struct seq_file
*seq
;
213 struct ct_iter_state
*st
;
216 st
= kmalloc(sizeof(struct ct_iter_state
), GFP_KERNEL
);
219 ret
= seq_open(file
, &ct_seq_ops
);
222 seq
= file
->private_data
;
224 memset(st
, 0, sizeof(struct ct_iter_state
));
231 static struct file_operations ct_file_ops
= {
232 .owner
= THIS_MODULE
,
236 .release
= seq_release_private
,
239 static void *ct_cpu_seq_start(struct seq_file
*seq
, loff_t
*pos
)
244 return SEQ_START_TOKEN
;
246 for (cpu
= *pos
-1; cpu
< NR_CPUS
; ++cpu
) {
247 if (!cpu_possible(cpu
))
250 return &per_cpu(nf_conntrack_stat
, cpu
);
256 static void *ct_cpu_seq_next(struct seq_file
*seq
, void *v
, loff_t
*pos
)
260 for (cpu
= *pos
; cpu
< NR_CPUS
; ++cpu
) {
261 if (!cpu_possible(cpu
))
264 return &per_cpu(nf_conntrack_stat
, cpu
);
270 static void ct_cpu_seq_stop(struct seq_file
*seq
, void *v
)
274 static int ct_cpu_seq_show(struct seq_file
*seq
, void *v
)
276 unsigned int nr_conntracks
= atomic_read(&nf_conntrack_count
);
277 struct ip_conntrack_stat
*st
= v
;
279 if (v
== SEQ_START_TOKEN
) {
280 seq_printf(seq
, "entries searched found new invalid ignore delete delete_list insert insert_failed drop early_drop icmp_error expect_new expect_create expect_delete\n");
284 seq_printf(seq
, "%08x %08x %08x %08x %08x %08x %08x %08x "
285 "%08x %08x %08x %08x %08x %08x %08x %08x \n",
307 static struct seq_operations ct_cpu_seq_ops
= {
308 .start
= ct_cpu_seq_start
,
309 .next
= ct_cpu_seq_next
,
310 .stop
= ct_cpu_seq_stop
,
311 .show
= ct_cpu_seq_show
,
314 static int ct_cpu_seq_open(struct inode
*inode
, struct file
*file
)
316 return seq_open(file
, &ct_cpu_seq_ops
);
319 static struct file_operations ct_cpu_seq_fops
= {
320 .owner
= THIS_MODULE
,
321 .open
= ct_cpu_seq_open
,
324 .release
= seq_release_private
,
326 #endif /* CONFIG_PROC_FS */
330 int nf_conntrack_checksum __read_mostly
= 1;
334 /* From nf_conntrack_proto_tcp.c */
335 extern unsigned int nf_ct_tcp_timeout_syn_sent
;
336 extern unsigned int nf_ct_tcp_timeout_syn_recv
;
337 extern unsigned int nf_ct_tcp_timeout_established
;
338 extern unsigned int nf_ct_tcp_timeout_fin_wait
;
339 extern unsigned int nf_ct_tcp_timeout_close_wait
;
340 extern unsigned int nf_ct_tcp_timeout_last_ack
;
341 extern unsigned int nf_ct_tcp_timeout_time_wait
;
342 extern unsigned int nf_ct_tcp_timeout_close
;
343 extern unsigned int nf_ct_tcp_timeout_max_retrans
;
344 extern int nf_ct_tcp_loose
;
345 extern int nf_ct_tcp_be_liberal
;
346 extern int nf_ct_tcp_max_retrans
;
348 /* From nf_conntrack_proto_udp.c */
349 extern unsigned int nf_ct_udp_timeout
;
350 extern unsigned int nf_ct_udp_timeout_stream
;
352 /* From nf_conntrack_proto_generic.c */
353 extern unsigned int nf_ct_generic_timeout
;
355 /* Log invalid packets of a given protocol */
356 static int log_invalid_proto_min
= 0;
357 static int log_invalid_proto_max
= 255;
359 static struct ctl_table_header
*nf_ct_sysctl_header
;
361 static ctl_table nf_ct_sysctl_table
[] = {
363 .ctl_name
= NET_NF_CONNTRACK_MAX
,
364 .procname
= "nf_conntrack_max",
365 .data
= &nf_conntrack_max
,
366 .maxlen
= sizeof(int),
368 .proc_handler
= &proc_dointvec
,
371 .ctl_name
= NET_NF_CONNTRACK_COUNT
,
372 .procname
= "nf_conntrack_count",
373 .data
= &nf_conntrack_count
,
374 .maxlen
= sizeof(int),
376 .proc_handler
= &proc_dointvec
,
379 .ctl_name
= NET_NF_CONNTRACK_BUCKETS
,
380 .procname
= "nf_conntrack_buckets",
381 .data
= &nf_conntrack_htable_size
,
382 .maxlen
= sizeof(unsigned int),
384 .proc_handler
= &proc_dointvec
,
387 .ctl_name
= NET_NF_CONNTRACK_CHECKSUM
,
388 .procname
= "nf_conntrack_checksum",
389 .data
= &nf_conntrack_checksum
,
390 .maxlen
= sizeof(unsigned int),
392 .proc_handler
= &proc_dointvec
,
395 .ctl_name
= NET_NF_CONNTRACK_TCP_TIMEOUT_SYN_SENT
,
396 .procname
= "nf_conntrack_tcp_timeout_syn_sent",
397 .data
= &nf_ct_tcp_timeout_syn_sent
,
398 .maxlen
= sizeof(unsigned int),
400 .proc_handler
= &proc_dointvec_jiffies
,
403 .ctl_name
= NET_NF_CONNTRACK_TCP_TIMEOUT_SYN_RECV
,
404 .procname
= "nf_conntrack_tcp_timeout_syn_recv",
405 .data
= &nf_ct_tcp_timeout_syn_recv
,
406 .maxlen
= sizeof(unsigned int),
408 .proc_handler
= &proc_dointvec_jiffies
,
411 .ctl_name
= NET_NF_CONNTRACK_TCP_TIMEOUT_ESTABLISHED
,
412 .procname
= "nf_conntrack_tcp_timeout_established",
413 .data
= &nf_ct_tcp_timeout_established
,
414 .maxlen
= sizeof(unsigned int),
416 .proc_handler
= &proc_dointvec_jiffies
,
419 .ctl_name
= NET_NF_CONNTRACK_TCP_TIMEOUT_FIN_WAIT
,
420 .procname
= "nf_conntrack_tcp_timeout_fin_wait",
421 .data
= &nf_ct_tcp_timeout_fin_wait
,
422 .maxlen
= sizeof(unsigned int),
424 .proc_handler
= &proc_dointvec_jiffies
,
427 .ctl_name
= NET_NF_CONNTRACK_TCP_TIMEOUT_CLOSE_WAIT
,
428 .procname
= "nf_conntrack_tcp_timeout_close_wait",
429 .data
= &nf_ct_tcp_timeout_close_wait
,
430 .maxlen
= sizeof(unsigned int),
432 .proc_handler
= &proc_dointvec_jiffies
,
435 .ctl_name
= NET_NF_CONNTRACK_TCP_TIMEOUT_LAST_ACK
,
436 .procname
= "nf_conntrack_tcp_timeout_last_ack",
437 .data
= &nf_ct_tcp_timeout_last_ack
,
438 .maxlen
= sizeof(unsigned int),
440 .proc_handler
= &proc_dointvec_jiffies
,
443 .ctl_name
= NET_NF_CONNTRACK_TCP_TIMEOUT_TIME_WAIT
,
444 .procname
= "nf_conntrack_tcp_timeout_time_wait",
445 .data
= &nf_ct_tcp_timeout_time_wait
,
446 .maxlen
= sizeof(unsigned int),
448 .proc_handler
= &proc_dointvec_jiffies
,
451 .ctl_name
= NET_NF_CONNTRACK_TCP_TIMEOUT_CLOSE
,
452 .procname
= "nf_conntrack_tcp_timeout_close",
453 .data
= &nf_ct_tcp_timeout_close
,
454 .maxlen
= sizeof(unsigned int),
456 .proc_handler
= &proc_dointvec_jiffies
,
459 .ctl_name
= NET_NF_CONNTRACK_UDP_TIMEOUT
,
460 .procname
= "nf_conntrack_udp_timeout",
461 .data
= &nf_ct_udp_timeout
,
462 .maxlen
= sizeof(unsigned int),
464 .proc_handler
= &proc_dointvec_jiffies
,
467 .ctl_name
= NET_NF_CONNTRACK_UDP_TIMEOUT_STREAM
,
468 .procname
= "nf_conntrack_udp_timeout_stream",
469 .data
= &nf_ct_udp_timeout_stream
,
470 .maxlen
= sizeof(unsigned int),
472 .proc_handler
= &proc_dointvec_jiffies
,
475 .ctl_name
= NET_NF_CONNTRACK_GENERIC_TIMEOUT
,
476 .procname
= "nf_conntrack_generic_timeout",
477 .data
= &nf_ct_generic_timeout
,
478 .maxlen
= sizeof(unsigned int),
480 .proc_handler
= &proc_dointvec_jiffies
,
483 .ctl_name
= NET_NF_CONNTRACK_LOG_INVALID
,
484 .procname
= "nf_conntrack_log_invalid",
485 .data
= &nf_ct_log_invalid
,
486 .maxlen
= sizeof(unsigned int),
488 .proc_handler
= &proc_dointvec_minmax
,
489 .strategy
= &sysctl_intvec
,
490 .extra1
= &log_invalid_proto_min
,
491 .extra2
= &log_invalid_proto_max
,
494 .ctl_name
= NET_NF_CONNTRACK_TCP_TIMEOUT_MAX_RETRANS
,
495 .procname
= "nf_conntrack_tcp_timeout_max_retrans",
496 .data
= &nf_ct_tcp_timeout_max_retrans
,
497 .maxlen
= sizeof(unsigned int),
499 .proc_handler
= &proc_dointvec_jiffies
,
502 .ctl_name
= NET_NF_CONNTRACK_TCP_LOOSE
,
503 .procname
= "nf_conntrack_tcp_loose",
504 .data
= &nf_ct_tcp_loose
,
505 .maxlen
= sizeof(unsigned int),
507 .proc_handler
= &proc_dointvec
,
510 .ctl_name
= NET_NF_CONNTRACK_TCP_BE_LIBERAL
,
511 .procname
= "nf_conntrack_tcp_be_liberal",
512 .data
= &nf_ct_tcp_be_liberal
,
513 .maxlen
= sizeof(unsigned int),
515 .proc_handler
= &proc_dointvec
,
518 .ctl_name
= NET_NF_CONNTRACK_TCP_MAX_RETRANS
,
519 .procname
= "nf_conntrack_tcp_max_retrans",
520 .data
= &nf_ct_tcp_max_retrans
,
521 .maxlen
= sizeof(unsigned int),
523 .proc_handler
= &proc_dointvec
,
529 #define NET_NF_CONNTRACK_MAX 2089
531 static ctl_table nf_ct_netfilter_table
[] = {
533 .ctl_name
= NET_NETFILTER
,
534 .procname
= "netfilter",
536 .child
= nf_ct_sysctl_table
,
539 .ctl_name
= NET_NF_CONNTRACK_MAX
,
540 .procname
= "nf_conntrack_max",
541 .data
= &nf_conntrack_max
,
542 .maxlen
= sizeof(int),
544 .proc_handler
= &proc_dointvec
,
549 static ctl_table nf_ct_net_table
[] = {
554 .child
= nf_ct_netfilter_table
,
558 EXPORT_SYMBOL(nf_ct_log_invalid
);
559 #endif /* CONFIG_SYSCTL */
561 static int __init
nf_conntrack_standalone_init(void)
563 #ifdef CONFIG_PROC_FS
564 struct proc_dir_entry
*proc
, *proc_exp
, *proc_stat
;
568 ret
= nf_conntrack_init();
572 #ifdef CONFIG_PROC_FS
573 proc
= proc_net_fops_create("nf_conntrack", 0440, &ct_file_ops
);
574 if (!proc
) goto cleanup_init
;
576 proc_exp
= proc_net_fops_create("nf_conntrack_expect", 0440,
578 if (!proc_exp
) goto cleanup_proc
;
580 proc_stat
= create_proc_entry("nf_conntrack", S_IRUGO
, proc_net_stat
);
582 goto cleanup_proc_exp
;
584 proc_stat
->proc_fops
= &ct_cpu_seq_fops
;
585 proc_stat
->owner
= THIS_MODULE
;
588 nf_ct_sysctl_header
= register_sysctl_table(nf_ct_net_table
, 0);
589 if (nf_ct_sysctl_header
== NULL
) {
590 printk("nf_conntrack: can't register to sysctl.\n");
592 goto cleanup_proc_stat
;
600 #ifdef CONFIG_PROC_FS
601 remove_proc_entry("nf_conntrack", proc_net_stat
);
603 proc_net_remove("nf_conntrack_expect");
605 proc_net_remove("nf_conntrack");
607 #endif /* CNFIG_PROC_FS */
608 nf_conntrack_cleanup();
612 static void __exit
nf_conntrack_standalone_fini(void)
615 unregister_sysctl_table(nf_ct_sysctl_header
);
617 #ifdef CONFIG_PROC_FS
618 remove_proc_entry("nf_conntrack", proc_net_stat
);
619 proc_net_remove("nf_conntrack_expect");
620 proc_net_remove("nf_conntrack");
621 #endif /* CNFIG_PROC_FS */
622 nf_conntrack_cleanup();
625 module_init(nf_conntrack_standalone_init
);
626 module_exit(nf_conntrack_standalone_fini
);
628 /* Some modules need us, but don't depend directly on any symbol.
629 They should call this. */
630 void need_conntrack(void)
634 #ifdef CONFIG_NF_CONNTRACK_EVENTS
635 EXPORT_SYMBOL_GPL(nf_conntrack_chain
);
636 EXPORT_SYMBOL_GPL(nf_conntrack_expect_chain
);
637 EXPORT_SYMBOL_GPL(nf_conntrack_register_notifier
);
638 EXPORT_SYMBOL_GPL(nf_conntrack_unregister_notifier
);
639 EXPORT_SYMBOL_GPL(__nf_ct_event_cache_init
);
640 EXPORT_PER_CPU_SYMBOL_GPL(nf_conntrack_ecache
);
641 EXPORT_SYMBOL_GPL(nf_ct_deliver_cached_events
);
643 EXPORT_SYMBOL(nf_ct_l3proto_try_module_get
);
644 EXPORT_SYMBOL(nf_ct_l3proto_module_put
);
645 EXPORT_SYMBOL(nf_conntrack_l3proto_register
);
646 EXPORT_SYMBOL(nf_conntrack_l3proto_unregister
);
647 EXPORT_SYMBOL(nf_conntrack_l4proto_register
);
648 EXPORT_SYMBOL(nf_conntrack_l4proto_unregister
);
649 EXPORT_SYMBOL(nf_ct_invert_tuplepr
);
650 EXPORT_SYMBOL(nf_conntrack_destroyed
);
651 EXPORT_SYMBOL(need_conntrack
);
652 EXPORT_SYMBOL(nf_conntrack_helper_register
);
653 EXPORT_SYMBOL(nf_conntrack_helper_unregister
);
654 EXPORT_SYMBOL(nf_ct_iterate_cleanup
);
655 EXPORT_SYMBOL(__nf_ct_refresh_acct
);
656 EXPORT_SYMBOL(nf_ct_protos
);
657 EXPORT_SYMBOL(__nf_ct_l4proto_find
);
658 EXPORT_SYMBOL(nf_ct_l4proto_find_get
);
659 EXPORT_SYMBOL(nf_ct_l4proto_put
);
660 EXPORT_SYMBOL(nf_ct_l3proto_find_get
);
661 EXPORT_SYMBOL(nf_ct_l3proto_put
);
662 EXPORT_SYMBOL(nf_ct_l3protos
);
663 EXPORT_SYMBOL_GPL(nf_conntrack_checksum
);
664 EXPORT_SYMBOL(nf_conntrack_expect_alloc
);
665 EXPORT_SYMBOL(nf_conntrack_expect_put
);
666 EXPORT_SYMBOL(nf_conntrack_expect_related
);
667 EXPORT_SYMBOL(nf_conntrack_unexpect_related
);
668 EXPORT_SYMBOL(nf_conntrack_tuple_taken
);
669 EXPORT_SYMBOL(nf_conntrack_htable_size
);
670 EXPORT_SYMBOL(nf_conntrack_lock
);
671 EXPORT_SYMBOL(nf_conntrack_hash
);
672 EXPORT_SYMBOL(nf_conntrack_untracked
);
673 EXPORT_SYMBOL_GPL(nf_conntrack_find_get
);
674 #ifdef CONFIG_IP_NF_NAT_NEEDED
675 EXPORT_SYMBOL(nf_conntrack_tcp_update
);
677 EXPORT_SYMBOL(__nf_conntrack_confirm
);
678 EXPORT_SYMBOL(nf_ct_get_tuple
);
679 EXPORT_SYMBOL(nf_ct_invert_tuple
);
680 EXPORT_SYMBOL(nf_conntrack_in
);
681 EXPORT_SYMBOL(__nf_conntrack_attach
);
682 EXPORT_SYMBOL(nf_conntrack_alloc
);
683 EXPORT_SYMBOL(nf_conntrack_free
);
684 EXPORT_SYMBOL(nf_conntrack_flush
);
685 EXPORT_SYMBOL(nf_ct_remove_expectations
);
686 EXPORT_SYMBOL(nf_ct_helper_find_get
);
687 EXPORT_SYMBOL(nf_ct_helper_put
);
688 EXPORT_SYMBOL(__nf_conntrack_helper_find_byname
);
689 EXPORT_SYMBOL(__nf_conntrack_find
);
690 EXPORT_SYMBOL(nf_ct_unlink_expect
);
691 EXPORT_SYMBOL(nf_conntrack_hash_insert
);
692 EXPORT_SYMBOL(__nf_conntrack_expect_find
);
693 EXPORT_SYMBOL(nf_conntrack_expect_find
);
694 EXPORT_SYMBOL(nf_conntrack_expect_list
);
695 #if defined(CONFIG_NF_CT_NETLINK) || \
696 defined(CONFIG_NF_CT_NETLINK_MODULE)
697 EXPORT_SYMBOL(nf_ct_port_tuple_to_nfattr
);
698 EXPORT_SYMBOL(nf_ct_port_nfattr_to_tuple
);