Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | commit phase: if conntrack exists, update it | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-07 | 2 | -1/+2 |
| | |||||
* | add aliases --sport and --dport to make it more iptables-like | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-04 | 4 | -12/+15 |
| | |||||
* | o use NFCT_SOPT_SETUP_* facilities: nfct_setobjopt | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-04 | 3 | -104/+11 |
| | | | | o remove bogus option to get a conntrack in test.sh example file | ||||
* | o remove useless backlog parameter in multicast sockets | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-04 | 18 | -198/+122 |
| | | | | | | | | o remove reminiscents of delay destroy message and relax transitions o remove confusing StripNAT parameter: NAT support enabled by default o relax event tracking: *_update callbacks use cache_update_force o use wraparound-aware functions after/before/between o lots of cleanups | ||||
* | fix error message in configure.in (Eric Leblond) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-31 | 2 | -2/+3 |
| | |||||
* | fix silly bug in build_network_message: out of bound memset | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-30 | 2 | -0/+5 |
| | |||||
* | conntrack --output requires one parameter (Krzysztof Oledzki) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-29 | 1 | -1/+1 |
| | |||||
* | simplify checksum code: use UDP/multicast checksum facilities | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-24 | 8 | -69/+19 |
| | |||||
* | - update TODO listsvn_t_conntrack-tools-0.9.3 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-23 | 3 | -20/+32 |
| | | | | | - update INSTALL - use conntrack instead of conntrackd to flush the conntrack table | ||||
* | add missing ignore_conntrack in the overrun handler | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-21 | 3 | -1/+7 |
| | |||||
* | - introduce cache_iterate | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-20 | 10 | -105/+190 |
| | | | | | | | | - empty debug_ct function if DEBUG_CT is not set - revisit overrun handler: this is a hard battle, just try to do our best here, call Patrick :) - explicit warning message when netlink_buffer_max_growth is reached - fix silly bug in stats-mode when dumping in XML format - fix UDP handler for conntrack | ||||
* | - remove dead code sync-mode.c | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-18 | 7 | -96/+96 |
| | | | | | | | - flush nack queue in the conntrackd -f path - do not increase add_fail counter for EEXIST errors - cleanup sync-nack code - improve mcast_recv_netmsg: sanity check before checksumming! | ||||
* | add script for keepalived fault state (eg. unplugged cable/link down) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-15 | 7 | -0/+13 |
| | |||||
* | o introduce '--output xml,extended,timestamp' option for '-L', '-G' and '-E' | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-07 | 7 | -60/+96 |
| | | | | o several fixes for the output of usage messages | ||||
* | - update changelog | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-06 | 2 | -13/+25 |
| | | | | - use positive logic in error handling | ||||
* | - add warning note to ctnl_test.c: old API is deprecated | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-06 | 9 | -614/+643 |
| | | | | | | | | - split expect_api_test.c into small example files expect_*.c - introduce alias tags for original tuple attributes - introduce nfexp_sizeof and nfexp_maxsize - build expectation attributes iif they are set - fix l3num setting in expect/build.c | ||||
* | fix MODULE_DIR enviroment variable | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-25 | 1 | -1/+1 |
| | |||||
* | move test.sh into examples/ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-17 | 1 | -0/+0 |
| | |||||
* | - remove overkill recursive Makefile.am definition in examples/ (use EXTRA_DIST) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-17 | 11 | -15/+4 |
| | |||||
* | - bump version to 0.9.3 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-17 | 4 | -4/+5 |
| | | | | | - show 'conntrack-tools' string when 'conntrack -V' is issued - include missing headers to include/Makefile.am | ||||
* | introduce conntrack(8) manpage | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-17 | 1 | -2/+1 |
| | |||||
* | - Merge conntrack and conntrackd changelogs, even if it will be dropped from ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-16 | 4 | -241/+238 |
| | | | | | | SVN soon. - Update INSTALL documentation | ||||
* | del initial daemon and cli directories | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-16 | 10 | -1094/+0 |
| | |||||
* | first step forward to merge conntrackd and conntrack into the same building ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-16 | 93 | -8/+12 |
| | | | | chain | ||||
* | initial import of the conntrack daemon to Netfilter SVN | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-16 | 103 | -0/+7976 |
| | |||||
* | [patch] conntrack tool: Fix loading of protocol helpers (Thomas Jarosch ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2007-03-16 | 1 | -1/+1 |
| | | | | | | | | | | <thomas.jarosch@intra2net.com>) the pkgconfig changes from August 2006 broke the loading of the protocol helpers as dlopen() doesn't search for symbols in the main executable. As a result the protocol helpers can't find register_proto(). Attached patch fixes the problem. | ||||
* | [patch] conntrack compile fix (Thomas Jarosch <thomas.jarosch@intra2net.com>) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2007-03-16 | 1 | -0/+1 |
| | |||||
* | comment `autoheader' invocation from autogen.sh, we don't need any config.h ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-01-23 | 1 | -1/+1 |
| | | | | file to compile the conntrack tool | ||||
* | [PATCH 5/6] conntrack pkt-config changes (KOVACS Krisztian <hidden@balabit.hu>) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2006-08-03 | 2 | -28/+13 |
| | |||||
* | [PATCH]: Userspace code related to fixed timeout patch (Eric Leblond ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2006-07-03 | 1 | -4/+4 |
| | | | | <eric@inl.fr>) | ||||
* | [PATCH] fix conntrack compilation (Eric Leblond <eric@inl.fr>) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2006-06-19 | 1 | -0/+4 |
| | |||||
* | [PATCH] conntrack: Fix option parsing for ARM (Philip Craig | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-05-22 | 1 | -1/+1 |
| | | | | | <philipc@snapgear.com>) The result of getopt_long() was assigned to a char, which defaults to unsigned | ||||
* | fix ICMP protocol extension parse callback | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-03-19 | 2 | -0/+5 |
| | |||||
* | o Add support to filter dumped entries. ie: | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-01-15 | 2 | -22/+50 |
| | | | | | | | - display all the connections to IMAPS servers conntrack -L -p tcp --orig-port-dst 993 - display all the connection marked with 2 conntrack -L -m 2 | ||||
* | o Added missing parameters to set the ports of an expectation tuple | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-01-15 | 8 | -4/+63 |
| | | | | o Bumped version to 1.00beta2 | ||||
* | add 'debian' to EXTRA_DIST | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-07 | 1 | -1/+4 |
| | |||||
* | make 'rules' executable, remove 'tarball' from cdbs | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-07 | 1 | -1/+1 |
| | |||||
* | use '1.00' instead of '1.0' as version number | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-07 | 1 | -1/+1 |
| | |||||
* | add debian package support (Max Kellermann) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-07 | 6 | -0/+55 |
| | |||||
* | <pablo@netfilter.org> | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-26 | 5 | -163/+230 |
| | | | | | | | | | | | | o add IPv6 support: main change o removed dead code: iptables_insmod and get_modprobe o compact the commands vs. options table o move working vars from the stack to the BSS section o update manpage o Bumped version to 1.0beta1 <yasuyuki.kozakai@toshiba.co.jp> o check address family mismatch o fix incomplete copying IPv6 addresses | ||||
* | More changes to prepare upcoming ipv4 supportsvn_t_conntrack-0.991 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-19 | 2 | -5/+6 |
| | |||||
* | We only support ipv4 at the moment, set l3protonum to AF_INET | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-19 | 2 | -1/+13 |
| | |||||
* | o Restore include "conntrack.h" in ICMP handler | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-04 | 4 | -15/+16 |
| | | | | o Add missing flags coversion in SCTP handler | ||||
* | o Add support to filter events. ie: -p tcp --orig-port-dst 80 in | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-03 | 8 | -175/+123 |
| | | | | | | | | | conjuction with -E to get all the requests to HTTP servers o Update manpage o Missing static function declaration in the protocol handlers o Use protocol flags defined in libnetfilter_conntrack o Kill leftover #include "conntrack.h" in the ICMP helper o Bumped version to 0.991 | ||||
* | Fixed oversized number of options (Marcus Sundberg) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-22 | 2 | -2/+6 |
| | |||||
* | some libc's don't have IPPROTO_SCTP yet | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 1 | -0/+5 |
| | |||||
* | linke with libnetfilter_conntrack | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 1 | -1/+1 |
| | |||||
* | update revision to 0.99 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 1 | -1/+1 |
| | |||||
* | use AM_CFLAGS, not CFLAGS | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 1 | -1/+1 |
| | |||||
* | - get rid of KERNELDIR | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 4 | -7/+7 |
| | | | | - use Make_global.am |