pynetfilter_conntrack is a Python binding of libnetfilter_conntrack
Project description
libnetfilter_conntrack is a library to manage Linux firewall NetFilter. pynetfilter_conntrack is a Python binding of this library. The binding is the file pynetfilter_conntrack.py and you have also a clone of conntrack program: conntrack.py.
conntrack.py
conntrack.py is a clone of conntrack C program. Features:
List connections ;
Export connections to XML document ;
Delete connection.
For all commands, you can filter connections with:
source/destination address from original/reply destination ;
layer 3 and 4 protocols ;
source/destination port from original/reply destination (protocols tcp, udp and sctp).
Installation
- Run this command as root:
./setup.py install
- Or using sudo program:
sudo python setup.py install
Dependencies
Linux kernel: 2.6.14+ http://www.kernel.org/
libnetfilter_conntrack 0.0.75+ (May 2007) http://www.netfilter.org/projects/libnetfilter_conntrack/
Python 2.3+ http://www.python.org/
IPy 0.50+ http://software.inl.fr/trac/trac.cgi/wiki/IPy Debian package: python-ipy
ctypes 1.0+ (only for Python < 2.5) http://starship.python.net/crew/theller/ctypes/ Debian package: python-ctypes
ChangeLog
Release 0.5 (2008-09-29)
New classes for EXPECT manipulation, Expect and ExpectEntry
Remove Conntrack.destroy_conntrack(), replaced by ConntrackEntry.destroy()
ConntrackEntry IP (v4 and v6) attributes are now IPy.IP objects
Remove hashtuple attribute from ConntrackEntry
BUGFIX: Don’t convert endian (ntohl) when reading entry.status value
Write cnetfilter_conntrack: Python binding of the libnetfilter_conntrack library written in C
Release 0.4.2 (2007-10-16)
Fix ConntrackEntry._getAttr() for Python 2.3
Release 0.4.1
Fix ConntrackEntry.hashtuple for layer3 different than IPv4 and IPV6
Use correct bitmask with ntohs() in ConntrackEntry._getAttr()
Release 0.4
Rewrite from scratch for new libnetfilter_conntrack
Release 0.3.1
Add debian/ subdirectory for Debian and Ubuntu packaging
Release 0.3
Compliance with ‘pickle’
Minor enhancements in API
Release 0.2
Python 2.3 compliant
Use ElementTree (or cElementTree) to generate XML output
nfct_address: add getIP(), returns a IPy.IP() object
Fix minor bugs in ConntrackTable.filter()
setup.py: add requires (used by setuptools)
