diff --git a/expr/ct.go b/expr/ct.go index 99b7191..aba7489 100644 --- a/expr/ct.go +++ b/expr/ct.go @@ -48,11 +48,12 @@ const ( CtKeyZONE CtKey = unix.NFT_CT_ZONE CtKeyEVENTMASK CtKey = unix.NFT_CT_EVENTMASK - CtStatINVALID uint32 = 1 - CtStatESTABLISHED uint32 = 2 - CtStatRELATED uint32 = 4 - CtStatNEW uint32 = 8 - CtStatUNTRACKED uint32 = 64 + // https://sources.debian.org/src//nftables/0.9.8-3/src/ct.c/?hl=39#L39 + CtStatBitINVALID uint32 = 1 + CtStatBitESTABLISHED uint32 = 2 + CtStatBitRELATED uint32 = 4 + CtStatBitNEW uint32 = 8 + CtStatBitUNTRACKED uint32 = 64 ) // Ct defines type for NFT connection tracking diff --git a/nftables_test.go b/nftables_test.go index 6b79807..8f932b7 100644 --- a/nftables_test.go +++ b/nftables_test.go @@ -1083,7 +1083,7 @@ func TestCtStat(t *testing.T) { SourceRegister: 1, DestRegister: 1, Len: 4, - Mask: binaryutil.NativeEndian.PutUint32(expr.CtStatESTABLISHED | expr.CtStatRELATED), + Mask: binaryutil.NativeEndian.PutUint32(expr.CtStatBitESTABLISHED | expr.CtStatBitRELATED), Xor: binaryutil.NativeEndian.PutUint32(0), }, &expr.Cmp{Op: expr.CmpOpNeq, Register: 1, Data: []byte{0, 0, 0, 0}},