nf_ct_iterate_destroy(9)

👑 nf_ct_iterate_destroy(9) 👑

okay so welcome to the Kernel API Manual, bestie 💖. This page is all about nf_ct_iterate_destroy, and it’s lowkey giving “cleanup era” energy: destroy unconfirmed conntracks and iterate table. Let’s get into it, no cap.

🌸 NAME 🌸

nf_ct_iterate_destroy — destroy unconfirmed conntracks and iterate table.

✨ SYNOPSIS ✨

void nf_ct_iterate_destroy (int (*iter)(struct nf_conn *i, void *data) ,
       void *data );

🎀 ARGUMENTS 🎀

• iter — callback to invoke for each conntrack. It’s literally the function that gets called for every conntrack, iykyk.
• data — data to pass to iter. The little payload that rides along with the callback.

💅 DESCRIPTION 💅

It’s like nf_ct_iterate_cleanup, but first it marks conntracks on the unconfirmed list as dying (so they will not be inserted into main table). Very “clean up before the main character entrance” energy, honestly.

🚨 Warning, bestie: it can only be called in module exit path. That’s the rule. No cap.

🔥 SEE ALSO 🔥

• Kernel file ./net/netfilter/nf_conntrack_core.c
• nf_ct_match_reverse(9)
• nf_ct_resolve_clash_harder(9)
• nf_ct_resolve_clash(9)

💖 and that’s the page! cute sign-off time: this one lives in the Kernel API Manual as nf_ct_iterate_destroy(9), with footer source/version ./net/netfilter, date October 2026, and title nf_ct_iterate_destroy(9). bye bestie, go slay those conntracks 🫶✨