Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | improve network message sanity checkings | Pablo Neira Ayuso | 2008-05-18 | 6 | -40/+60 |
| | |||||
* | - remove (misleading) counters and use information from the statistics mode | Pablo Neira Ayuso | 2008-05-16 | 4 | -75/+12 |
| | | | | | - use generic nfct_copy() from libnetfilter_conntrack to update objects - use generic nfct_cmp() to compare objects | ||||
* | minor fix of the manpage (Max Wilhelm) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-05-14 | 2 | -1/+2 |
| | |||||
* | Fix reorder possible reordering of destroy messages under message omission. ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-29 | 10 | -49/+105 |
| | | | | This patch introduces the TimeoutDestroy clause to determine how long a conntrack remains in the internal cache once it has been destroy from the kernel table. | ||||
* | rework of the FT-FW approach | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-26 | 6 | -110/+257 |
| | |||||
* | add more verbose error notification when the injection of a conntrack fails | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-16 | 6 | -13/+35 |
| | |||||
* | minor update of the manpages | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-16 | 2 | -3/+7 |
| | |||||
* | o fix NAT filtering via --src-nat and --dst-nat (reported by K.Oledzki) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-16 | 9 | -66/+120 |
| | | | | | | o recover the ID support o show display counters to stderr o enable filtering by status and ID | ||||
* | fix conntrack -U -p tcp [...] | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-13 | 6 | -10/+68 |
| | |||||
* | relax parameter checking for UDP and TCP | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-13 | 2 | -2/+2 |
| | |||||
* | check for pkg-config before anything (fix bogus missing libraries failure) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-13 | 2 | -0/+9 |
| | |||||
* | add initial automated qa testing for the conntrack cli | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-13 | 3 | -0/+102 |
| | |||||
* | This is a major improvement of the conntrack command line tool: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-13 | 3 | -78/+233 |
| | | | | | | | | o check for missing source/address IP/ports in creation and get operations o way more flexible conntrack updates and deletions o fix NAT filtering via --src-nat and --dst-nat (reported by K.Oledzki) o show display counters to stderr o minor cleanups | ||||
* | o simplify parameter-handling code | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-12 | 4 | -267/+157 |
| | | | | | o check for missing source/address IP/ports o minor cleanups | ||||
* | update manpages with the new URL | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-09 | 3 | -2/+4 |
| | |||||
* | improve netlink overrun handling | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-09 | 7 | -75/+111 |
| | |||||
* | fix asymmetric path support (still some open concerns) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-08 | 4 | -4/+68 |
| | |||||
* | fix compilation in ARM (reported by Thiemo Seufer via Max Kellermann) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-08 | 1 | -0/+1 |
| | |||||
* | fix minor compilation issue in amd64 with gcc4.3 (reported by Daniel Schepler | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-26 | 2 | -1/+2 |
| | | | | via M.Kellermann) | ||||
* | add missing libct_proto_icmpv6.c | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-25 | 1 | -0/+129 |
| | |||||
* | Krzysztof Oledzki <ole@ans.pl>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-25 | 5 | -4/+12 |
| | | | | | o add ICMPv6 (-p icmpv6) support o add possibility to distinguish between invalid (unknown) and empty proto | ||||
* | Pablo Neira Ayuso <pablo@netfilter.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-25 | 4 | -3/+12 |
| | | | | | | | o remove .svn directory from make distcheck tarballs (reported by B.Benjamini) + Krzysztof Oledzki <ole@ans.pl>: o fix minor compilation warning | ||||
* | remove .svn from doc/ in tarballs (reported by Gilad Benjamini) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-09 | 1 | -1/+1 |
| | |||||
* | update changelog with 0.9.6 release datesvn_t_conntrack-tools-0.9.6 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-08 | 1 | -1/+1 |
| | |||||
* | revert relicensing... still we use linux_list.h code which seems to be GPLv2 ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-08 | 31 | -654/+319 |
| | | | | only which is incompatible AFAIK | ||||
* | relicense conntrack-tools as GPLv3+, so far the most significant contributor ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-08 | 31 | -319/+654 |
| | | | | has been Max Kellermann and has no issues with relicensing their contributions. | ||||
* | cleanup: remove config_set from main(), use config_file variable instead | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-22 | 2 | -4/+4 |
| | |||||
* | compose the file descriptor set at initialization stage to save some cycles | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-19 | 9 | -21/+120 |
| | |||||
* | From: Max Kellermann <max@duempel.org> | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-14 | 6 | -20/+21 |
| | | | | whitespace cleanups | ||||
* | From: Max Kellermann <max@duempel.org> | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-14 | 1 | -3/+2 |
| | | | | use list_for_each_entry() | ||||
* | From: Max Kellermann <max@duempel.org> | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-14 | 1 | -1/+2 |
| | | | | make alarm_run_queue a local variable | ||||
* | From: Max Kellermann <max@duempel.org> | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-14 | 2 | -5/+2 |
| | | | | use "for" loop instead of "while" | ||||
* | From: Max Kellermann <max@duempel.org> | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-14 | 2 | -2/+3 |
| | | | | eliminate duplicated initialization | ||||
* | add missing bits for NAT sequence adjusment support | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-09 | 1 | -0/+14 |
| | |||||
* | o add IPv6 information to synchronization messages | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-09 | 6 | -9/+36 |
| | | | | | o add support for NAT sequence adjustment (requires Linux kernel >= 2.6.25) o remove TODO file from release tarballs | ||||
* | remove leftover line referring old -S option | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-02 | 1 | -2/+0 |
| | |||||
* | add IPv6 support to conntrackd | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-02 | 11 | -108/+197 |
| | |||||
* | implement a rb-tree based alarm framework | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-29 | 11 | -138/+631 |
| | |||||
* | remain is size_t instead of ssize_t to remove the cast | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-23 | 1 | -2/+2 |
| | |||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-23 | 10 | -30/+33 |
| | | | | use size_t | ||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-23 | 4 | -0/+14 |
| | | | | introduce alarm_pending() | ||||
* | missing casting to keep -Werror happy | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-23 | 1 | -1/+1 |
| | |||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-23 | 2 | -0/+6 |
| | | | | | | check if the received packet is large enough Minor changes by the committer | ||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-23 | 2 | -1/+1 |
| | | | | remove unused prototype in network.h | ||||
* | add comment to clarify handle_msg() | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-23 | 1 | -0/+1 |
| | |||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-23 | 5 | -18/+27 |
| | | | | | | added struct local_server, several cleanups in local socket infrastructure This patch include minor changes by the comitter | ||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-23 | 2 | -1/+2 |
| | | | | fix error checking of local_create_server() | ||||
* | fix inconsistent alarm update in cache_alarm_update | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-22 | 1 | -1/+3 |
| | |||||
* | minor cleanups | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-22 | 1 | -5/+5 |
| | |||||
* | remove alarm counter | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-22 | 2 | -7/+1 |
| |