net/netfilter/nf_conncount.c

File Facts

System

Linux kernel

Corpus path

net/netfilter/nf_conncount.c

Extension

.c

Size

19364 bytes

Lines

775

Domain

Networking Core

Bucket

Sockets, Protocols, Packet Path, And Network Policy

Inferred role

Networking Core: exported/initcall integration point

Status

integration implementation candidate

Why This File Exists

Networking stack implementation surface: socket APIs, protocol dispatch, packet flow, routing, filtering, and network namespaces.

• Networking stack implementation surface: socket APIs, protocol dispatch, packet flow, routing, filtering, and network namespaces.
• Exports symbols or registers init work; inspect boot/module ordering and who consumes the exported contract.
• Uses kernel synchronization; read lock ordering, sleepability, and interrupt context assumptions before translating.
• Defines or uses C structs; map object ownership, embedded links, reference counts, and lock ownership.

Dependency Surface

• linux/in.h
• linux/in6.h
• linux/ip.h
• linux/ipv6.h
• linux/jhash.h
• linux/slab.h
• linux/list.h
• linux/rbtree.h
• linux/module.h
• linux/random.h
• linux/skbuff.h
• linux/spinlock.h
• linux/netfilter/nf_conntrack_tcp.h
• linux/netfilter/x_tables.h
• net/netfilter/nf_conntrack.h
• net/netfilter/nf_conntrack_count.h
• net/netfilter/nf_conntrack_core.h
• net/netfilter/nf_conntrack_tuple.h
• net/netfilter/nf_conntrack_zones.h

Detected Declarations

• struct nf_conncount_tuple
• struct nf_conncount_rb
• struct nf_conncount_root
• struct nf_conncount_data
• function already_closed
• function key_diff
• function conn_free
• function find_or_evict
• function get_ct_or_tuple_from_skb
• function __nf_conncount_add
• function nf_conncount_add_skb
• function nf_conncount_list_init
• function __nf_conncount_gc_list
• function list_for_each_entry_safe
• function nf_conncount_gc_list
• function __tree_nodes_free
• function tree_nodes_free
• function schedule_gc_worker
• function insert_tree
• function find_tree_node
• function count_tree
• function insert_tree
• function tree_gc_worker
• function nf_conncount_count_skb
• function nf_conncount_root_init
• function nf_conncount_cache_free
• function destroy_tree
• function nf_conncount_destroy
• function nf_conncount_modinit
• function nf_conncount_modexit
• module init nf_conncount_modinit
• export nf_conncount_add_skb
• export nf_conncount_list_init
• export nf_conncount_gc_list
• export nf_conncount_count_skb
• export nf_conncount_init
• export nf_conncount_cache_free
• export nf_conncount_destroy

Annotated Snippet

module_init(nf_conncount_modinit);
module_exit(nf_conncount_modexit);
MODULE_AUTHOR("Jan Engelhardt <jengelh@medozas.de>");
MODULE_AUTHOR("Florian Westphal <fw@strlen.de>");
MODULE_DESCRIPTION("netfilter: count number of connections matching a key");
MODULE_LICENSE("GPL");

Annotation

• Immediate include surface: `linux/in.h`, `linux/in6.h`, `linux/ip.h`, `linux/ipv6.h`, `linux/jhash.h`, `linux/slab.h`, `linux/list.h`, `linux/rbtree.h`.
• Detected declarations: `struct nf_conncount_tuple`, `struct nf_conncount_rb`, `struct nf_conncount_root`, `struct nf_conncount_data`, `function already_closed`, `function key_diff`, `function conn_free`, `function find_or_evict`, `function get_ct_or_tuple_from_skb`, `function __nf_conncount_add`.
• Atlas domain: Networking Core / Sockets, Protocols, Packet Path, And Network Policy.
• Implementation status: integration implementation candidate.
• Synchronization appears in or near this file; preserve lock ordering, sleepability, and interrupt-context constraints.

Implementation Notes

• This generated page is the file-by-file coverage layer; curated subsystem chapters should link here when they synthesize a multi-file control flow.
• Core OS pages should be promoted from atlas-only to deep-reviewed when they explain data structures, invariants, locking, lifecycle, and C implementation snippets.
• Driver-family pages are intentionally pattern-oriented unless they are part of the selected PCIe/NVMe representative device path.