Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | extensions: remove use of old libnetfilter API flags | Pablo Neira Ayuso | 2009-03-06 | 4 | -36/+102 |
| | | | | | | | This patch removes the use of the obsolete old libnetfilter protocol flags. This patch also improves error reporting in TCP and UDP. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | conntrack: allow use of --state with -D | Pablo Neira Ayuso | 2009-02-08 | 1 | -1/+1 |
| | | | | | | | With this patch, you can use -p tcp --state to delete based on the protocol state. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | conntrack: cleanup command line tool protocol extensions | Pablo Neira Ayuso | 2008-11-18 | 4 | -187/+52 |
| | | | | | | This patch cleans up the protocol extensions. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | conntrack: fix filtering for unsupported protocol | Pablo Neira Ayuso | 2008-10-04 | 2 | -1/+37 |
| | | | | | | | | | This patch fixes filtering for unsupported protocol. Thus, you can use -L -p 47 or -L -p gre to filter `gre' traffic. Based on an initial patch from Bryan Duff <bduff@astrocorp.com>. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | fix conntrack -U -p tcp [...] | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-13 | 4 | -0/+58 |
| | |||||
* | relax parameter checking for UDP and TCP | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-13 | 2 | -2/+2 |
| | |||||
* | o simplify parameter-handling code | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-12 | 2 | -50/+16 |
| | | | | | o check for missing source/address IP/ports o minor cleanups | ||||
* | add missing libct_proto_icmpv6.c | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-25 | 1 | -0/+129 |
| | |||||
* | Krzysztof Oledzki <ole@ans.pl>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-25 | 1 | -1/+2 |
| | | | | | o add ICMPv6 (-p icmpv6) support o add possibility to distinguish between invalid (unknown) and empty proto | ||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-17 | 2 | -2/+3 |
| | | | | import only required C headers and put local headers on top to check | ||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-15 | 3 | -5/+3 |
| | | | | Fix tons of gcc warnings | ||||
* | include protocol filter parameters in the manpage | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-07-18 | 3 | -39/+0 |
| | |||||
* | conntrackd: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-07-18 | 3 | -40/+118 |
| | | | | | | | | | - use buffer of MTU size conntrack: - better protocol argument checkings - fix per-protocol filtering, eg. conntrack -[L|E] -p tcp now works - show per-protocol help, ie. conntrack -h -p tcp - add alias --src for --orig-src and alias --dst for --orig-dst | ||||
* | remove dlopen infrastructure: simplification, it was too much for it | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-09 | 4 | -20/+8 |
| | |||||
* | add aliases --sport and --dport to make it more iptables-like | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-04 | 2 | -0/+4 |
| | |||||
* | - introduce cache_iterate | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-20 | 1 | -20/+34 |
| | | | | | | | | - empty debug_ct function if DEBUG_CT is not set - revisit overrun handler: this is a hard battle, just try to do our best here, call Patrick :) - explicit warning message when netlink_buffer_max_growth is reached - fix silly bug in stats-mode when dumping in XML format - fix UDP handler for conntrack | ||||
* | o introduce '--output xml,extended,timestamp' option for '-L', '-G' and '-E' | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-07 | 3 | -35/+20 |
| | | | | o several fixes for the output of usage messages | ||||
* | - add warning note to ctnl_test.c: old API is deprecated | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-06 | 5 | -283/+191 |
| | | | | | | | | - split expect_api_test.c into small example files expect_*.c - introduce alias tags for original tuple attributes - introduce nfexp_sizeof and nfexp_maxsize - build expectation attributes iif they are set - fix l3num setting in expect/build.c | ||||
* | first step forward to merge conntrackd and conntrack into the same building ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-16 | 8 | -0/+648 |
| | | | | chain | ||||
* | initial import of the conntrack daemon to Netfilter SVN | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-16 | 8 | -648/+0 |
| | |||||
* | fix ICMP protocol extension parse callback | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-03-19 | 1 | -0/+1 |
| | |||||
* | o Added missing parameters to set the ports of an expectation tuple | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-01-15 | 3 | -1/+53 |
| | | | | o Bumped version to 1.00beta2 | ||||
* | o Restore include "conntrack.h" in ICMP handler | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-04 | 2 | -12/+13 |
| | | | | o Add missing flags coversion in SCTP handler | ||||
* | o Add support to filter events. ie: -p tcp --orig-port-dst 80 in | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-03 | 4 | -150/+82 |
| | | | | | | | | | conjuction with -E to get all the requests to HTTP servers o Update manpage o Missing static function declaration in the protocol handlers o Use protocol flags defined in libnetfilter_conntrack o Kill leftover #include "conntrack.h" in the ICMP helper o Bumped version to 0.991 | ||||
* | use AM_CFLAGS, not CFLAGS | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 1 | -1/+1 |
| | |||||
* | - get rid of KERNELDIR | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 1 | -2/+1 |
| | | | | - use Make_global.am | ||||
* | don't use library versioning for extensions | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-11 | 1 | -4/+4 |
| | |||||
* | - rename plugisn to remove 'lib' prefix | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-10 | 1 | -6/+10 |
| | | | | - move them into 'pkglibdir' | ||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-06 | 4 | -5/+5 |
| | |||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-03 | 4 | -6/+12 |
| | |||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-03 | 2 | -4/+16 |
| | |||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-10-31 | 4 | -4/+4 |
| | |||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-10-28 | 4 | -24/+0 |
| | |||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-10-27 | 4 | -4/+4 |
| | |||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-10-16 | 4 | -33/+4 |
| | |||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-10-16 | 4 | -119/+37 |
| | |||||
* | See Changelog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-10-07 | 1 | -7/+25 |
| | |||||
* | fix "dist-bzip2" for firt reelase | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-09-24 | 1 | -5/+1 |
| | |||||
* | major update (See ChangeLog) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-09-24 | 4 | -5/+10 |
| | |||||
* | make sure we build against KERELDIR! | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-09-23 | 1 | -1/+1 |
| | |||||
* | Bumped version to 0.80 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-08-08 | 3 | -3/+3 |
| | |||||
* | Resync to 2.6.14 and libnfnetlink_conntrack | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-08-08 | 3 | -3/+3 |
| | |||||
* | Resync to current libnfnetlink_conntrack and 2.6.14 tree | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-08-08 | 3 | -3/+3 |
| | |||||
* | More re-sync to work fine with current ip_conntrack_netlink implementation | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-08-02 | 3 | -5/+5 |
| | | | | available in Harald's 2.6.14 tree. | ||||
* | major re-sync with current names/definitions in libctnetlink and kernel | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-07-22 | 4 | -13/+32 |
| | |||||
* | o Use conntrack netlink attributes: Major change | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-07-12 | 4 | -111/+240 |
| | | | | o Kill action setting: Mask based dumping | ||||
* | o Fixed syntax error (tab/space issue) in help message | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-06-24 | 7 | -9/+214 |
| | | | | | | | | | | | o Fixed getopt handling on big endian machines o Fixed possible future read-over-end-of-array in TCP extension o Add manpage o Add missing space at output of libct_proto_icmp.c o Add status bits that were introduced in 2.6.11 o Add SCTP extension o Add support for expect creation o Bump version number to 0.63 | ||||
* | Added missing libct_proto_icmp file | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-05-24 | 1 | -0/+110 |
| | |||||
* | o Added descriptive error messages. | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-05-17 | 2 | -18/+10 |
| | | | | o Fix wrong flags check in [tcp|udp] proto helpers. | ||||
* | Completed some stuff related to protocol helpers: | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-05-15 | 3 | -1/+51 |
| | | | | | | o final_check o help o ICMP support |