Alter iptables conntrack entries / add additional field in tuple?
 

Is there any way to play with iptable conntrack tuple , i want to add one more field/variable in tuple and want to see the same in conntrack log .
please help me ...

eg : conntrack -L tcp 17 2 src=X.X.X.X dst=X.x.x.x sport=42403 dport=53 src=x.x.x.x dst=x.x.x.x sport=53 dport=42403 [ASSURED] mark=0 use=1

i need output like:

tcp 17 2 src=X.X.X.X dst=X.x.x.x sport=42403 dport=53 src=x.x.x.x dst=x.x.x.x sport=53 dport=42403 [ASSURED] mark=0 connapp=facebook use=1

Never mind the short-lived nature of some network connections, sites relying on content distribution networks or other aspects of networking, if you think a "connapp" identifier is vital for your conntrack operations then I'd say just go code it. The kernel and conntrack tool sources are available for modification.

Thanks unSpawn
Can you please provide me some guidelines or any document which i can refer in order to achieve my goal .

Thanks in advance ....

No, sorry, but the kernel and conntrack tool sources are available for modification. I guess you'll just have to start by reading a lot.