libnetfilter_conntrack - libnetfilter

	Commit message (Collapse)	Author	Age	Files	Lines
*	setobjopt: don't autocomplete the reply tuple for ICMP[v6]	Pablo Neira Ayuso	2009-12-21	1	-2/+15
\| \| \| \| \| \| \| \|	This patch fixes the autocomplete feature for ICMP[v6] entries that makes the kernel return EINVAL. Basically, we skip the autocomplete since this is already done in the setter. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	src: make symbols used only in file scope static	Hannes Eder	2009-10-08	1	-2/+2
\| \| \| \| \|	Signed-off-by: Hannes Eder <heder@google.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	src: set specific array size for the API	Pablo Neira Ayuso	2008-11-23	1	-2/+2
\| \| \| \| \| \| \|	This patch adds the size of the arrays to set to NULL unset elements. This helps to spot unset functions for new attributes. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	API: use of __builtin_expect in error checking paths	Pablo Neira Ayuso	2008-10-30	1	-2/+2
\| \| \| \| \| \| \| \| \|	This patch introduces likely() and unlikely() that use __builtin_expect to assist the compiler in the branch decisions. I am assuming that we have no clients of libnetfilter_conntrack that use gcc < 2.96. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	objopt: use indirect calls instead of switch	Pablo Neira Ayuso	2008-10-30	1	-63/+99
\| \| \| \| \| \|	This patch replaces the use of switch by indirect function calls. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	cleanup: split internal.h into several internal header files	Pablo Neira Ayuso	2008-07-25	1	-1/+1
\| \| \| \| \| \| \|	This patch cleanups the internal headers by splitting them into several logical pieces. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	fix missing bitset in the autocomplete code	/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org	2008-04-13	1	-0/+3
\|
*	fix several compilation warnings (reported by J.Engelhardt)	/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org	2007-12-09	1	-1/+1
\|
*	introduce NFCT_SOPT_SETUP_* options to simplify object setup	/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org	2007-06-04	1	-0/+24
\|
*	fix silly bug in nfct_getobjopt(..., NFCT_GOPT_IS_*NAT), always return 1 if ↵	/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org	2007-06-04	1	-8/+8
\| \| \| \|	status flags are set
*	- fix inconsistency in the behaviour of nfct_set_attr with ATTR_STATUS: now ↵	/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org	2007-02-27	1	-5/+9
\| \| \| \| \| \|	status flags bits of conntrack objects in userspace can be set and unset as it happens with other attributes. - nfct_get_objopt with NAT detectors previously checks if the status attribute is set, otherwise it just skips it.
*	Introduce the new libnetfilter_conntrack API, features:	/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org	2006-12-19	1	-0/+71
	- object oriented infrastructure - extensible and configurable output (XML) - low level functions to interact with netlink details - fairly documented Still backward compatible.