Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | [PATCH]: Userspace code related to fixed timeout patch (Eric Leblond ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2006-07-03 | 1 | -0/+5 |
| | | | | <eric@inl.fr>) | ||||
* | Fix endianess of tcp ports in the tuple. | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=gandalf/emailAddress=gandalf@netfilter.org | 2006-03-26 | 1 | -4/+4 |
| | |||||
* | Make sure we set l3protonum in the tuples. | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=gandalf/emailAddress=gandalf@netfilter.org | 2006-03-26 | 1 | -0/+2 |
| | |||||
* | Fix expectation mask dumping | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-03-01 | 1 | -1/+33 |
| | |||||
* | only copy include file from kernel directory if 'autogen.sh' is run with ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-02-14 | 1 | -1/+1 |
| | | | | 'distrib' argument | ||||
* | pkg-config enable all netfilter libraries | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-02-09 | 3 | -1/+19 |
| | |||||
* | export a function required by nfct helper support | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-02-09 | 2 | -2/+10 |
| | |||||
* | add version info | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-02-09 | 1 | -1/+1 |
| | |||||
* | Simplification: nfnl_send + nfnl_listen calls for nfnl_talk | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-02-09 | 1 | -18/+3 |
| | |||||
* | flush stdout, so realtime output to a pipe is broken (Daniel De Graaf) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-01-22 | 1 | -0/+1 |
| | |||||
* | o Add missing layer-3 protocol flags for the expectation tuple | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2006-01-15 | 4 | -6/+21 |
| | | | | o Update copyright date | ||||
* | make sure configure fails if libnfnetlink is too old (< 0.0.16) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-14 | 1 | -2/+2 |
| | |||||
* | Introduce various API changes throughout the library stack | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-14 | 5 | -63/+116 |
| | | | | | | | | | | | 1) make libnfnetlink dynamically allocate it's handles 2) apply that change throughout libnetfilter_* 3) add {nfq,nflog,nfct}_open_nfnl() functions that open the specific subsystem on top of an existing nfnl_handle, which is required for upcoming libnetfilter_conntrack_helper The changes break ABI and API compatibility of libnfnetlink, but don't break ABI or API compatibility of the libnetfilter_* libraries. | ||||
* | don't miss the plugins while installing | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-07 | 1 | -0/+1 |
| | |||||
* | we have to include l3extensions.h in dist | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-07 | 1 | -1/+2 |
| | |||||
* | make 'rules' executable, remove 'tarball' from cdbs | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-07 | 2 | -2/+4 |
| | |||||
* | add 'debian' subdirectory for building debian packages | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2006-01-07 | 6 | -0/+57 |
| | |||||
* | o add IPv6 support | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-26 | 15 | -72/+512 |
| | | | | | | | | | | | | o clean up layer-4 compare functions o finish the comparison infrastructure: support for tuple/mark matching o fix bug in the default event display when used in conjunction with the comparison infrastructure. o Bumped version to 0.0.30 Thanks to Yasuyuki Kozakai for: [LIBNETFILTER_CONNTRACK] fix dumping IPv6 connections that in included in this commit. | ||||
* | Yasuyuki confirmed that l3protonum must be u_int8_t instead of u_int16t.svn_t_libnetfilter_conntrack-0.0.29 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-21 | 1 | -10/+8 |
| | | | | | Another reason to use such type: the nfnetlink header uses u_int8_t to set the layer 3 protocol family, so let's keep some consistency. | ||||
* | Add support for per-family table flushing. ie. flush just AF_INET entries. ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-19 | 2 | -6/+6 |
| | | | | Towards ipv6 support. | ||||
* | Slightly API changes required for the upcoming ipv6 support | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-19 | 4 | -13/+19 |
| | |||||
* | Add l3protonum field to nfct_tuple: ensure backward compatibility once | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-19 | 1 | -0/+1 |
| | | | | the ipv6 suport comes. | ||||
* | Use u_int8_t for CTA_PROTO_NUM | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2005-12-18 | 1 | -1/+1 |
| | |||||
* | o Fixed bugs in UDP and SCTP protocol handlers (parse_proto) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-12-03 | 14 | -20/+318 |
| | | | | | | | | | o Added the comparison infrastructure for layer-4 protocols o Added libnetfilter_conntrack_[tcp|udp|icmp|sctp].h that contains the protocol flags used by the comparison infrastructure o Added nfct_conntrack_compare to compare two conntracks based on flags o Killed nfct_event_netlink_handler o nfct_event_[conntrack|expect] requires ROOT privileges (reason: netlink multicast) o Bumped version to 0.29 | ||||
* | add KERNEL_DIR option to autogen.sh for all new libraries (Krzysztof Oledzki) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-17 | 1 | -2/+2 |
| | |||||
* | we need to use AM_CFLAGS to prevent overriding of user-specified CFLAGSsvn_t_libnetfilter_conntrack-0.0.28 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 1 | -1/+1 |
| | |||||
* | some old libc's don't define IPPROTO_SCTP | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 1 | -0/+6 |
| | |||||
* | add Make_global.am to EXTRA_DIST | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 1 | -0/+2 |
| | |||||
* | add global Makefile | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 1 | -0/+6 |
| | |||||
* | - get rid of KERNELDIR include | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 5 | -9/+7 |
| | | | | - have only one place where we specify the includes (Make_global.am) | ||||
* | This patch add the ability to copy and mangle the kernel headers | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-14 | 1 | -0/+23 |
| | | | | | required by libnfnetlink and libnetfilter_[queue|log|conntrack] at autogen.sh stage. (Pablo Neira) | ||||
* | bump version to 0.0.27svn_t_libnetfilter_conntrack-0.0.27 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-11 | 1 | -2/+2 |
| | |||||
* | don't use kernel headers installed on system, but include our own ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-11 | 9 | -48/+145 |
| | | | | linux_nnfnetlink_conntrack.h | ||||
* | o nfct_build_conntrack is too much, the only clients are new_conntrack and svn_t_libnetfilter_conntrack-0.0.26 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-09 | 2 | -70/+84 |
| | | | | | | | update_conntrack, and it doesn't even fit well for both cases. So I decided to kill it and inline the code adapting it when was necessary. o Convert all unsigned int/long to POSIX types u_int32_t. Better now than later :(. | ||||
* | introduce library API versioning and plugin release handling | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-06 | 3 | -11/+13 |
| | |||||
* | - modules don't need a 'lib' prefix | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-06 | 2 | -13/+20 |
| | | | | - modules need to be linked against libnetfilter_conntrack.la, otherwise they miss a dependency | ||||
* | sed 's/nfct_proto_.so/libnfct_proto_.so/g' | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-06 | 1 | -2/+2 |
| | |||||
* | o move nfct_handler to libnetfilter_conntrack.c, better for encapsulation | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-06 | 8 | -26/+23 |
| | | | | | | | | o fixed ICMP ID handling o fix -> libtool: link: libtool library `nfct_proto_*.la' must begin with `lib' o remove wrong flag at extensions/Makefile.am o bumped version to 0.0.26 o fixed versioning :( | ||||
* | remove bogus acinclude.m4 stuff | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-05 | 1 | -5/+5 |
| | |||||
* | - move plugins to their own subdirectory | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-05 | 3 | -8/+13 |
| | | | | - rename plugins to something that indicates their purpose (protocol) | ||||
* | we have to link against libnfnetlink, otherwise the dependency is missing | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-05 | 1 | -1/+1 |
| | |||||
* | destination ipv6 address is also 128bits, not 64. | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-04 | 1 | -1/+1 |
| | |||||
* | add nfct_fd() function | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-04 | 2 | -0/+7 |
| | |||||
* | add extra 'data' argument to callback functions | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org | 2005-11-04 | 3 | -18/+28 |
| | |||||
* | Add another missing bit concerned with the blank space in nfct_sprintf_expect_id | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-03 | 1 | -1/+2 |
| | |||||
* | Remove last blank space returned by nfct_sprintf_expect_id | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-03 | 1 | -1/+2 |
| | |||||
* | o Kill non-portable NIPQUAD, use inet_ntoa instead. | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-03 | 2 | -24/+46 |
| | | | | | | | | | | | | o nfct_build_conntrack flit bits of status, timeout, id and mark. o finish incomplete support for marks: kernel part missing (patch on the way) o network byte order translation in build_conntrack instead of nfct_conntrack_alloc. Now this translation is transparent to the clients of the library. o Kill last blank space output in nfct_sprintf_[conntrack|expect] (Thanks to Krzysztof Oledzk for reporting this). o add missing initialization of buffer in nfct_default_*_display. o Bumped version to 0.2.5. | ||||
* | o Display similar ICMP output as cat /proc/net/ip_conntrack | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-02 | 1 | -9/+5 |
| | |||||
* | o ctnl_test now uses NFCT_ALL_CT_GROUPS | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-01 | 1 | -1/+1 |
| | |||||
* | o Bumped version to 0.2.4 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2005-11-01 | 2 | -10/+14 |
| | | | | | | | o Redefine NFCT_ALL_CT_GROUPS o Fix typemsg2enum prototype, flags and type are 16 bits long, not 8 bits o Fix wrong expectation timeout and ID output o Fix getting and killing conntracks by ID |