conntrack-tools - Userspace tools for interacting with the Connection Tracking System

Distribution: openSUSE 13.2
Repository: openSUSE Update all
Package name: conntrack-tools
Package version: 1.4.2
Package release: 4.4.1
Package architecture: x86_64
Package type: rpm
Installed size: 351.13 KB
Download size: 119.98 KB
Official Mirror:
The conntrack-tools are a set of tools targeted at system administrators. They are conntrack, the userspace command line interface, and conntrackd, the userspace daemon. The tool conntrack provides a full featured interface that has replaced the old procfs interface. Using conntrack, you can view and manage the in-kernel connection tracking state table from userspace. On the other hand, conntrackd covers the specific aspects of stateful firewalls to enable highly available scenarios, and can be used as statistics collector as well.


  • conntrack-tools = 1.4.2-4.4.1
  • conntrack-tools(x86-64) = 1.4.2-4.4.1

    Install Howto

    Install conntrack-tools rpm package:

    # zypper install conntrack-tools


    • /usr/lib64/conntrack-tools/
    • /usr/lib64/conntrack-tools/
    • /usr/lib64/conntrack-tools/
    • /usr/sbin/conntrack
    • /usr/sbin/conntrackd
    • /usr/sbin/nfct
    • /usr/share/doc/packages/conntrack-tools/AUTHORS
    • /usr/share/doc/packages/conntrack-tools/TODO
    • /usr/share/doc/packages/conntrack-tools/conntrackd.conf
    • /usr/share/man/man8/conntrack.8.gz
    • /usr/share/man/man8/conntrackd.8.gz
    • /usr/share/man/man8/nfct.8.gz


    2015-10-05 - - Fix a possible crash if conntrackd sees DCCP, SCTP and ICMPv6 traffic and the corresponding kernel modules that track this traffic are not available. (bsc#942149, CVE-2015-6496) adding CVE-2015-6496.patch

    2014-09-23 - - Drop gpg-offline build-time requirement; this is now handled by the local source validator

    2013-08-07 - - Update to new upstream release 1.4.2 * This release includes bugfixes and the connlabel support.

    2013-03-04 - - Update to new upstream release 1.4.1 * conntrack: add support to dump the dying and unconfirmed list via ctnetlink * conntrackd: fix deadlock due to wrong nested signal blocking

    2012-11-20 - - Verify GPG signature

    2012-10-08 - - Update to new upstream release 1.4.0 * This release adds the user-space helper infrastructure which includes the RPC portmapper (to support NFSv3) and Oracle*TNS helpers.

    2012-07-31 - - Update to new upstream release 1.2.2 * conntrackd: commit operation has to be synchronous * conntrackd: implement selective flushing for -t and -F commands

    2012-05-31 - - Resolve compilation failure due to missing #include

    2012-05-26 - - Update to new upstream release 1.2.1 * Add support for NAT expectations, synchronization of expectation class, helper names and expect functions. Filtering by mark is now allowed.

    2012-01-04 - - Update to new upstream release 1.0.1 * add support for mark masks