Skip to content
Florian Forster edited this page Nov 21, 2023 · 1 revision
Name: ConnTrack plugin
Type: read
Callbacks: read
Status: supported
FirstVersion: 4.7
Copyright: 2009 Tomasz Pala
License: GPLv2
Manpage: n/a
See also: List of Plugins

The ConnTrack plugin tracks the number of entries in Linux's connection tracking table.

In order to do stateful packet inspection (SPI), the Linux packet filter IP-Tables keeps track of established connections in the connection tracking table. This allows packets belonging to an established connection to be accepted quickly and only new connections will go through the entire firewalling logic.

Example graphs

conntrack.png

Dependencies

  • Linux
    • /proc-file system
Clone this wiki locally