FM / netfilter

/usr/include/linux/netfilter

Name	Size	Mode	Actions
ipset/	-	0755	rm
nfnetlink.h	1557	0644	edit dl rm
nfnetlink_compat.h	2381	0644	edit dl rm
nfnetlink_conntrack.h	3526	0644	edit dl rm
nfnetlink_log.h	2517	0644	edit dl rm
nfnetlink_queue.h	2251	0644	edit dl rm
nf_conntrack_common.h	2315	0644	edit dl rm
nf_conntrack_ftp.h	375	0644	edit dl rm
nf_conntrack_sctp.h	623	0644	edit dl rm
nf_conntrack_tcp.h	1199	0644	edit dl rm
nf_conntrack_tuple_common.h	295	0644	edit dl rm
xt_AUDIT.h	655	0644	edit dl rm
xt_CHECKSUM.h	500	0644	edit dl rm
xt_CLASSIFY.h	154	0644	edit dl rm
xt_cluster.h	305	0644	edit dl rm
xt_comment.h	176	0644	edit dl rm
xt_connbytes.h	511	0644	edit dl rm
xt_connlimit.h	361	0644	edit dl rm
xt_CONNMARK.h	737	0644	edit dl rm
xt_connmark.h	613	0644	edit dl rm
xt_CONNSECMARK.h	238	0644	edit dl rm
xt_conntrack.h	2485	0644	edit dl rm
xt_dccp.h	420	0644	edit dl rm
xt_DSCP.h	634	0644	edit dl rm
xt_dscp.h	638	0644	edit dl rm
xt_esp.h	355	0644	edit dl rm
xt_hashlimit.h	1742	0644	edit dl rm
xt_helper.h	125	0644	edit dl rm
xt_iprange.h	489	0644	edit dl rm
xt_LED.h	407	0644	edit dl rm
xt_length.h	158	0644	edit dl rm
xt_limit.h	610	0644	edit dl rm
xt_mac.h	135	0644	edit dl rm
xt_MARK.h	366	0644	edit dl rm
xt_mark.h	222	0644	edit dl rm
xt_multiport.h	658	0644	edit dl rm
xt_NFLOG.h	326	0644	edit dl rm
xt_NFQUEUE.h	478	0644	edit dl rm
xt_osf.h	3347	0644	edit dl rm
xt_owner.h	306	0644	edit dl rm
xt_physdev.h	467	0644	edit dl rm
xt_pkttype.h	125	0644	edit dl rm
xt_policy.h	914	0644	edit dl rm
xt_quota.h	320	0644	edit dl rm
xt_RATEEST.h	305	0644	edit dl rm
xt_rateest.h	774	0644	edit dl rm
xt_realm.h	157	0644	edit dl rm
xt_recent.h	524	0644	edit dl rm
xt_sctp.h	2275	0644	edit dl rm
xt_SECMARK.h	591	0644	edit dl rm
xt_set.h	1100	0644	edit dl rm
xt_state.h	268	0644	edit dl rm
xt_statistic.h	653	0644	edit dl rm
xt_string.h	601	0644	edit dl rm
xt_TCPMSS.h	172	0644	edit dl rm
xt_tcpmss.h	190	0644	edit dl rm
xt_TCPOPTSTRIP.h	322	0644	edit dl rm
xt_tcpudp.h	1187	0644	edit dl rm
xt_time.h	503	0644	edit dl rm
xt_TPROXY.h	473	0644	edit dl rm
xt_u32.h	695	0644	edit dl rm
x_tables.h	3668	0644	edit dl rm

Edit: /usr/include/linux/netfilter/nf_conntrack_common.h (2315B)

#ifndef _NF_CONNTRACK_COMMON_H
#define _NF_CONNTRACK_COMMON_H
/* Connection state tracking for netfilter.  This is separated from,
   but required by, the NAT layer; it can also be used by an iptables
   extension. */
enum ip_conntrack_info
{
	/* Part of an established connection (either direction). */
	IP_CT_ESTABLISHED,

/* Like NEW, but related to an existing connection, or ICMP error
	   (in either direction). */
	IP_CT_RELATED,

/* Started a new connection to track (only
           IP_CT_DIR_ORIGINAL); may be a retransmission. */
	IP_CT_NEW,

/* >= this indicates reply direction */
	IP_CT_IS_REPLY,

/* Number of distinct IP_CT types (no NEW in reply dirn). */
	IP_CT_NUMBER = IP_CT_IS_REPLY * 2 - 1
};

/* Bitset representing status of connection. */
enum ip_conntrack_status {
	/* It's an expected connection: bit 0 set.  This bit never changed */
	IPS_EXPECTED_BIT = 0,
	IPS_EXPECTED = (1 << IPS_EXPECTED_BIT),

/* We've seen packets both ways: bit 1 set.  Can be set, not unset. */
	IPS_SEEN_REPLY_BIT = 1,
	IPS_SEEN_REPLY = (1 << IPS_SEEN_REPLY_BIT),

/* Conntrack should never be early-expired. */
	IPS_ASSURED_BIT = 2,
	IPS_ASSURED = (1 << IPS_ASSURED_BIT),

/* Connection is confirmed: originating packet has left box */
	IPS_CONFIRMED_BIT = 3,
	IPS_CONFIRMED = (1 << IPS_CONFIRMED_BIT),

/* Connection needs src nat in orig dir.  This bit never changed. */
	IPS_SRC_NAT_BIT = 4,
	IPS_SRC_NAT = (1 << IPS_SRC_NAT_BIT),

/* Connection needs dst nat in orig dir.  This bit never changed. */
	IPS_DST_NAT_BIT = 5,
	IPS_DST_NAT = (1 << IPS_DST_NAT_BIT),

/* Both together. */
	IPS_NAT_MASK = (IPS_DST_NAT | IPS_SRC_NAT),

/* Connection needs TCP sequence adjusted. */
	IPS_SEQ_ADJUST_BIT = 6,
	IPS_SEQ_ADJUST = (1 << IPS_SEQ_ADJUST_BIT),

/* NAT initialization bits. */
	IPS_SRC_NAT_DONE_BIT = 7,
	IPS_SRC_NAT_DONE = (1 << IPS_SRC_NAT_DONE_BIT),

IPS_DST_NAT_DONE_BIT = 8,
	IPS_DST_NAT_DONE = (1 << IPS_DST_NAT_DONE_BIT),

/* Both together */
	IPS_NAT_DONE_MASK = (IPS_DST_NAT_DONE | IPS_SRC_NAT_DONE),

/* Connection is dying (removed from lists), can not be unset. */
	IPS_DYING_BIT = 9,
	IPS_DYING = (1 << IPS_DYING_BIT),

/* Connection has fixed timeout. */
	IPS_FIXED_TIMEOUT_BIT = 10,
	IPS_FIXED_TIMEOUT = (1 << IPS_FIXED_TIMEOUT_BIT),
};

#endif /* _NF_CONNTRACK_COMMON_H */

cmd: