Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | o fix NAT filtering via --src-nat and --dst-nat (reported by K.Oledzki) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-16 | 1 | -40/+52 |
| | | | | | | o recover the ID support o show display counters to stderr o enable filtering by status and ID | ||||
* | fix conntrack -U -p tcp [...] | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-13 | 1 | -10/+7 |
| | |||||
* | This is a major improvement of the conntrack command line tool: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-13 | 1 | -69/+220 |
| | | | | | | | | o check for missing source/address IP/ports in creation and get operations o way more flexible conntrack updates and deletions o fix NAT filtering via --src-nat and --dst-nat (reported by K.Oledzki) o show display counters to stderr o minor cleanups | ||||
* | o simplify parameter-handling code | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-12 | 1 | -217/+138 |
| | | | | | o check for missing source/address IP/ports o minor cleanups | ||||
* | fix minor compilation issue in amd64 with gcc4.3 (reported by Daniel Schepler | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-26 | 1 | -1/+1 |
| | | | | via M.Kellermann) | ||||
* | Krzysztof Oledzki <ole@ans.pl>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-25 | 1 | -1/+5 |
| | | | | | o add ICMPv6 (-p icmpv6) support o add possibility to distinguish between invalid (unknown) and empty proto | ||||
* | revert relicensing... still we use linux_list.h code which seems to be GPLv2 ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-08 | 1 | -1/+1 |
| | | | | only which is incompatible AFAIK | ||||
* | relicense conntrack-tools as GPLv3+, so far the most significant contributor ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-08 | 1 | -1/+1 |
| | | | | has been Max Kellermann and has no issues with relicensing their contributions. | ||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-17 | 1 | -1/+1 |
| | | | | | | explicitly cast in nat_parse() Previous commit was an error | ||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-17 | 1 | -7/+5 |
| | | | | eliminate local variable by returning from the loop | ||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-17 | 1 | -1/+1 |
| | | | | remove superfluous initialization | ||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-17 | 1 | -9/+3 |
| | | | | import only required C headers and put local headers on top to check | ||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-17 | 1 | -0/+5 |
| | | | | check for malloc() failure in merge_opts | ||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-17 | 1 | -3/+3 |
| | | | | use C99 integers (uint32_t instead of u_int32_t) | ||||
* | fix missing command initialization (breakage introduced in r7208) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-16 | 1 | -1/+1 |
| | |||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-15 | 1 | -17/+27 |
| | | | | Fix tons of gcc warnings | ||||
* | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-15 | 1 | -9/+9 |
| | | | | fix shadow warnings by renaming variables or making them local | ||||
* | Max Kellermann <max@duempel.org> | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-15 | 1 | -3/+1 |
| | | | | Use list_for_each_entry() instead of list_for_each() | ||||
* | add support for `conntrack -E -o xml,timestamp' | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-13 | 1 | -5/+8 |
| | |||||
* | show error and warning messages to stderr | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-12-24 | 1 | -3/+4 |
| | |||||
* | = conntrack = | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-12-21 | 1 | -23/+32 |
| | | | | | | | | | | | o fix missing `-g' and `-n' options in getopt_long control string o add support for secmark (requires Linux kernel >= 2.6.25) o add mark and secmark information to the manpage o cleanup error message = conntrackd = o add support for secmark (requires Linux kernel >= 2.6.25) o add conntrackd (8) manpage | ||||
* | conntrackd: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-07-18 | 1 | -60/+48 |
| | | | | | | | | | - use buffer of MTU size conntrack: - better protocol argument checkings - fix per-protocol filtering, eg. conntrack -[L|E] -p tcp now works - show per-protocol help, ie. conntrack -h -p tcp - add alias --src for --orig-src and alias --dst for --orig-dst | ||||
* | remove dlopen infrastructure: simplification, it was too much for it | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-09 | 1 | -16/+4 |
| | |||||
* | - add support for `-L --src-nat' and `-L --dst-nat' to show natted connections | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-09 | 1 | -4/+32 |
| | | | | - update conntrack(8) manpage | ||||
* | o use NFCT_SOPT_SETUP_* facilities: nfct_setobjopt | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-04 | 1 | -102/+8 |
| | | | | o remove bogus option to get a conntrack in test.sh example file | ||||
* | conntrack --output requires one parameter (Krzysztof Oledzki) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-29 | 1 | -1/+1 |
| | |||||
* | o introduce '--output xml,extended,timestamp' option for '-L', '-G' and '-E' | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-07 | 1 | -14/+39 |
| | | | | o several fixes for the output of usage messages | ||||
* | - update changelog | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-06 | 1 | -13/+13 |
| | | | | - use positive logic in error handling | ||||
* | - add warning note to ctnl_test.c: old API is deprecated | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-06 | 1 | -310/+425 |
| | | | | | | | | - split expect_api_test.c into small example files expect_*.c - introduce alias tags for original tuple attributes - introduce nfexp_sizeof and nfexp_maxsize - build expectation attributes iif they are set - fix l3num setting in expect/build.c | ||||
* | - bump version to 0.9.3 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-17 | 1 | -1/+1 |
| | | | | | - show 'conntrack-tools' string when 'conntrack -V' is issued - include missing headers to include/Makefile.am | ||||
* | first step forward to merge conntrackd and conntrack into the same building ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-16 | 1 | -0/+1131 |
| | | | | chain | ||||
* | initial import of the conntrack daemon to Netfilter SVN | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-16 | 1 | -1131/+0 |
| | |||||
* | [patch] conntrack compile fix (Thomas Jarosch <thomas.jarosch@intra2net.com>) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2007-03-16 | 1 | -0/+1 |
| | |||||
* | [PATCH]: Userspace code related to fixed timeout patch (Eric Leblond ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2006-07-03 | 1 | -4/+4 |
| | | | | <eric@inl.fr>) | ||||
* | [PATCH] conntrack: Fix option parsing for ARM (Philip Craig | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-05-22 | 1 | -1/+1 |
| | | | | | <philipc@snapgear.com>) The result of getopt_long() was assigned to a char, which defaults to unsigned | ||||
* | o Add support to filter dumped entries. ie: | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-01-15 | 1 | -22/+45 |
| | | | | | | | - display all the connections to IMAPS servers conntrack -L -p tcp --orig-port-dst 993 - display all the connection marked with 2 conntrack -L -m 2 | ||||
* | o Added missing parameters to set the ports of an expectation tuple | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-01-15 | 1 | -1/+1 |
| | | | | o Bumped version to 1.00beta2 | ||||
* | <pablo@netfilter.org> | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-26 | 1 | -161/+176 |
| | | | | | | | | | | | | o add IPv6 support: main change o removed dead code: iptables_insmod and get_modprobe o compact the commands vs. options table o move working vars from the stack to the BSS section o update manpage o Bumped version to 1.0beta1 <yasuyuki.kozakai@toshiba.co.jp> o check address family mismatch o fix incomplete copying IPv6 addresses | ||||
* | More changes to prepare upcoming ipv4 supportsvn_t_conntrack-0.991 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-19 | 1 | -5/+5 |
| | |||||
* | We only support ipv4 at the moment, set l3protonum to AF_INET | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-19 | 1 | -0/+8 |
| | |||||
* | o Restore include "conntrack.h" in ICMP handler | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-04 | 1 | -2/+3 |
| | | | | o Add missing flags coversion in SCTP handler | ||||
* | o Add support to filter events. ie: -p tcp --orig-port-dst 80 in | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-03 | 1 | -15/+24 |
| | | | | | | | | | conjuction with -E to get all the requests to HTTP servers o Update manpage o Missing static function declaration in the protocol handlers o Use protocol flags defined in libnetfilter_conntrack o Kill leftover #include "conntrack.h" in the ICMP helper o Bumped version to 0.991 | ||||
* | - rename plugisn to remove 'lib' prefix | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-10 | 1 | -2/+2 |
| | | | | - move them into 'pkglibdir' | ||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-09 | 1 | -1/+1 |
| | |||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-08 | 1 | -19/+31 |
| | |||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-06 | 1 | -32/+54 |
| | |||||
* | add extra argument to nfct_register_callback() to accomodate change in ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-04 | 1 | -9/+18 |
| | | | | libnetfilter_conntrack | ||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-03 | 1 | -109/+2 |
| | |||||
* | o Fix --id parameter parsing | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-01 | 1 | -2/+10 |
| | |||||
* | See ChangeLog | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-01 | 1 | -24/+18 |
| |