Module conntrack 

Connection tracking (conntrack) for stateful packet inspection

Tracks network connections using 5-tuple keys (src_ip, dst_ip, src_port, dst_port, protocol). Maintains TCP state machine for accurate connection lifecycle tracking. Supports garbage collection of expired entries and enforces a maximum entry limit to prevent resource exhaustion.

Structs

ConntrackEntry

A single connection tracking entry

ConntrackKey

5-tuple identifying a unique connection

ConntrackStats

Connection tracking statistics

ConntrackTable

Connection tracking table managing all active connections

NatInfo

NAT information associated with a connection

Enums

ConntrackState

High-level connection tracking state

TcpConnState

Detailed TCP connection state machine

Functions

init

Initialize the connection tracking subsystem

update_tcp_state

Update the TCP connection state based on observed flags

with_conntrack

Access the global conntrack table