Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Introduce NFCT_Q_CREATE_UPDATE: create conntrack, if it exists, update it | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-07 | 2 | -7/+13 | |
| | ||||||
* | nfexp_snprintf behaves as snprintf C99 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-07 | 2 | -27/+14 | |
| | ||||||
* | nfct_snprintf now returns the number of bytes that would have been written, ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-07 | 3 | -111/+112 | |
| | | | | not just the number of bytes written. Emulate snprintf behaviour as in specified in C99 | |||||
* | fix nfct_snprintf behaviour if the buffer passed is too small (similar to ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-07 | 5 | -183/+68 | |
| | | | | C99 convention) | |||||
* | introduce NFCT_SOPT_SETUP_* options to simplify object setup | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-04 | 6 | -52/+54 | |
| | ||||||
* | fix silly bug in nfct_getobjopt(..., NFCT_GOPT_IS_*NAT), always return 1 if ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-04 | 1 | -8/+8 | |
| | | | | status flags are set | |||||
* | fix invalid argument error: status flags may not be present in update messages | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-04 | 1 | -2/+7 | |
| | ||||||
* | add support for 64 bits counters (Krzysztof Oledzki) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-29 | 1 | -8/+24 | |
| | ||||||
* | add README filesvn_t_libnetfilter_conntrack-0.0.75 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-22 | 1 | -0/+62 | |
| | ||||||
* | - do not install example files, just compile them | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-21 | 2 | -2/+2 | |
| | | | | - bump version to 0.0.75 | |||||
* | - delete ctnl_test.c since it contains examples of the old *deprecated* API | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-20 | 4 | -169/+5 | |
| | | | | | - fix wrong port display in the XML output (Morten Isaksen) - use ntohs instead htons in snprintf_default.c | |||||
* | - split new_api_test.c into several conntrack_*.c files to learn much easier ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-13 | 10 | -130/+414 | |
| | | | | how the new API works | |||||
* | - add warning note to ctnl_test.c: old API is deprecated | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-06 | 12 | -221/+477 | |
| | | | | | | | | - split expect_api_test.c into small example files expect_*.c - introduce alias tags for original tuple attributes - introduce nfexp_sizeof and nfexp_maxsize - build expectation attributes iif they are set - fix l3num setting in expect/build.c | |||||
* | update credits | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-01 | 1 | -1/+1 | |
| | ||||||
* | Move old deprecated libnetfilter_conntrack API definitions at the bottom of ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-01 | 1 | -293/+302 | |
| | | | | libnetfilter_conntrack.h. The old API will be removed after quite some time. | |||||
* | introduce the new expectation API | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-01 | 17 | -20/+1182 | |
| | ||||||
* | - fix compilation warning in snprintf.c | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-24 | 5 | -4/+156 | |
| | | | | | | - introduce the new compare infrastructure: much simple than previous - introduce nfct_maxsize for nf_conntrack object allocated in the stack - more strict checkings in nfct_set_attr: third parameter is const | |||||
* | Remove debian/ dir from releases. | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-21 | 1 | -1/+1 | |
| | | | | | | | According to some feedback received from the following debian packagers: - ana at debian dot org - max at rfc2324 dot org The debian/ dir must not be included in official releases, keeping it under SVN is enough. | |||||
* | add extern C's to public headers (Phil Dibowitz) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-03-29 | 8 | -0/+64 | |
| | ||||||
* | libnetfilter_conntrack requires libnfnetlink >= 0.0.25 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-03-22 | 1 | -1/+1 | |
| | ||||||
* | bump version to 0.0.55 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-03-22 | 1 | -1/+1 | |
| | ||||||
* | Set status bit if whatever status flags are available, not only for ASSURED ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-03-21 | 1 | -4/+1 | |
| | | | | and SEEN_REPLY | |||||
* | [PATCH] Fix icmp_id setter and doc (Phil Dibowitz <phil@ipom.com>) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2007-03-17 | 2 | -2/+2 | |
| | | | | | | | | ICMP ID is stored as a u_int16_t, but its setter function derefs it's arguement as a u_int8_t. Additionally the api "doc" claims it's a u8, when it's not. This patch fixes both. | |||||
* | [patch] libnetlink_conntrack compile fix (Thomas Jarosch ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2007-03-16 | 1 | -0/+4 | |
| | | | | | | | <thomas.jarosch@intra2net.com>) attached patch fixes compilation of libnetlink_conntrack for old glibc versions. | |||||
* | - fix inconsistency in the behaviour of nfct_set_attr with ATTR_STATUS: now ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-02-27 | 2 | -6/+10 | |
| | | | | | | status flags bits of conntrack objects in userspace can be set and unset as it happens with other attributes. - nfct_get_objopt with NAT detectors previously checks if the status attribute is set, otherwise it just skips it. | |||||
* | fix wrong documentation in nfct_attr_get_u[*] functions | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-02-12 | 1 | -6/+9 | |
| | ||||||
* | use: [ "x$1" = "xdistrib" ] instead of [ "x$1" == "xdistrib" ] in autogen.sh ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-01-23 | 1 | -1/+1 | |
| | | | | (spotted by Victor Stinner) | |||||
* | - fix a crash on trying to set the counters of a conntracksvn_t_libnetfilter_conntrack-0.0.50 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-01-05 | 2 | -2/+16 | |
| | | | | | | | - document that ATTR_*_COUNTER_*, ATTR_USE and ATTR_ID are unsettable - implement getter for the ATTR_USE attribute Based on patches from Victor Stinner. | |||||
* | Minor fix in the counter parsing: replace htonl by ntonl, anyway they are ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-12-29 | 2 | -4/+4 | |
| | | | | actually the same function so this should not break anything. | |||||
* | Fix minor nitpick in the XML output (Victor Stinner) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-12-29 | 1 | -2/+2 | |
| | ||||||
* | - replace ntohs by htons in the example file (reported by Victor Stinner) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-12-23 | 3 | -8/+6 | |
| | | | | | - introduce NFCT_O_PLAIN flag: NFCT_O_DEFAULT points to NFCT_O_PLAIN - remove commented line in nfct_new() | |||||
* | Introduce the new libnetfilter_conntrack API, features: | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-12-19 | 22 | -19/+3012 | |
| | | | | | | | | | - object oriented infrastructure - extensible and configurable output (XML) - low level functions to interact with netlink details - fairly documented Still backward compatible. | |||||
* | Remove check for UID == 0, it is wrong for multiple reasons. (Sebastian ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2006-08-16 | 1 | -12/+0 | |
| | | | | Hagen <sebastian_hagen@memespace.net>) | |||||
* | [PATCH 1/6] libnetfilter_conntrack pkt-config modifications (KOVACS ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2006-08-03 | 3 | -5/+11 | |
| | | | | Krisztian <hidden@balabit.hu>) | |||||
* | [PATCH]: Userspace code related to fixed timeout patch (Eric Leblond ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2006-07-03 | 1 | -0/+5 | |
| | | | | <eric@inl.fr>) | |||||
* | Fix endianess of tcp ports in the tuple. | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=gandalf/emailAddress=gandalf@netfilter.org | 2006-03-26 | 1 | -4/+4 | |
| | ||||||
* | Make sure we set l3protonum in the tuples. | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=gandalf/emailAddress=gandalf@netfilter.org | 2006-03-26 | 1 | -0/+2 | |
| | ||||||
* | Fix expectation mask dumping | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-03-01 | 1 | -1/+33 | |
| | ||||||
* | only copy include file from kernel directory if 'autogen.sh' is run with ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-02-14 | 1 | -1/+1 | |
| | | | | 'distrib' argument | |||||
* | pkg-config enable all netfilter libraries | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-02-09 | 3 | -1/+19 | |
| | ||||||
* | export a function required by nfct helper support | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-02-09 | 2 | -2/+10 | |
| | ||||||
* | add version info | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-02-09 | 1 | -1/+1 | |
| | ||||||
* | Simplification: nfnl_send + nfnl_listen calls for nfnl_talk | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-02-09 | 1 | -18/+3 | |
| | ||||||
* | flush stdout, so realtime output to a pipe is broken (Daniel De Graaf) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-01-22 | 1 | -0/+1 | |
| | ||||||
* | o Add missing layer-3 protocol flags for the expectation tuple | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-01-15 | 4 | -6/+21 | |
| | | | | o Update copyright date | |||||
* | make sure configure fails if libnfnetlink is too old (< 0.0.16) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-14 | 1 | -2/+2 | |
| | ||||||
* | Introduce various API changes throughout the library stack | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-14 | 5 | -63/+116 | |
| | | | | | | | | | | | 1) make libnfnetlink dynamically allocate it's handles 2) apply that change throughout libnetfilter_* 3) add {nfq,nflog,nfct}_open_nfnl() functions that open the specific subsystem on top of an existing nfnl_handle, which is required for upcoming libnetfilter_conntrack_helper The changes break ABI and API compatibility of libnfnetlink, but don't break ABI or API compatibility of the libnetfilter_* libraries. | |||||
* | don't miss the plugins while installing | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-07 | 1 | -0/+1 | |
| | ||||||
* | we have to include l3extensions.h in dist | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-07 | 1 | -1/+2 | |
| | ||||||
* | make 'rules' executable, remove 'tarball' from cdbs | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-07 | 2 | -2/+4 | |
| |