pynetfilter_conntrack 0.7

pynetfilter_conntrack is a Python binding of libnetfilter_conntrack

libnetfilter_conntrack is a library to manage Linux firewall NetFilter. pynetfilter_conntrack is a Python binding of this library. The binding is the file pynetfilter_conntrack.py and you have also a clone of conntrack program: conntrack.py.

conntrack.py

conntrack.py is a clone of conntrack C program. Features:

• List connections ;

• Export connections to XML document ;

• Delete connection.

For all commands, you can filter connections with:

• source/destination address from original/reply destination ;

• layer 3 and 4 protocols ;

• source/destination port from original/reply destination (protocols tcp, udp and sctp).

Installation

Run this command as root:

./setup.py install

Or using sudo program:

sudo python setup.py install

Dependencies

• Linux kernel: 2.6.14+ http://www.kernel.org/

• libnetfilter_conntrack 0.0.75+ (May 2007) http://www.netfilter.org/projects/libnetfilter_conntrack/

• Python 2.3+ http://www.python.org/

• IPy 0.50+ http://software.inl.fr/trac/trac.cgi/wiki/IPy Debian package: python-ipy

• ctypes 1.0+ (only for Python < 2.5) http://starship.python.net/crew/theller/ctypes/ Debian package: python-ctypes

ChangeLog

Release 0.5 (2008-09-29)

• New classes for EXPECT manipulation, Expect and ExpectEntry

• Remove Conntrack.destroy_conntrack(), replaced by ConntrackEntry.destroy()

• ConntrackEntry IP (v4 and v6) attributes are now IPy.IP objects

• Remove hashtuple attribute from ConntrackEntry

• BUGFIX: Don’t convert endian (ntohl) when reading entry.status value

• Write cnetfilter_conntrack: Python binding of the libnetfilter_conntrack library written in C

Release 0.4.2 (2007-10-16)

• Fix ConntrackEntry._getAttr() for Python 2.3

Release 0.4.1

• Fix ConntrackEntry.hashtuple for layer3 different than IPv4 and IPV6

• Use correct bitmask with ntohs() in ConntrackEntry._getAttr()

Release 0.4

• Rewrite from scratch for new libnetfilter_conntrack

Release 0.3.1

• Add debian/ subdirectory for Debian and Ubuntu packaging

Release 0.3

• Compliance with ‘pickle’

• Minor enhancements in API

Release 0.2

• Python 2.3 compliant

• Use ElementTree (or cElementTree) to generate XML output

• nfct_address: add getIP(), returns a IPy.IP() object

• Fix minor bugs in ConntrackTable.filter()

• setup.py: add requires (used by setuptools)