summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* conntrack: fix BPF for filtering IPv6 addressesHEADmasterJeremy Sowden12 days1-4/+4
* Adding NFCT_FILTER_DUMP_TUPLE in filter_dump_attr, using kernel CTA_FILTER APIRomain Bellan12 days3-4/+84
* conntrack: add sanity check to netlink socket filter APIPablo Neira Ayuso2023-03-281-2/+15
* conntrack: simplify calculation of `struct sock_fprog` lengthJeremy Sowden2023-01-021-1/+1
* conntrack: fix BPF code for filtering on big-endian architecturesJeremy Sowden2023-01-021-1/+6
* expect/conntrack: Avoid spurious covscan overrun warningPhil Sutter2022-03-294-6/+6
* conntrack: don't cancel nest on unknown layer 4 protocolsPablo Neira Ayuso2021-12-101-2/+1
* conntrack: add nfct_nlmsg_build_filter() helperPablo Neira Ayuso2021-11-142-16/+24
* conntrack: fix invmap_icmpv6 entriesKen-ichirou MATSUZAWA2021-10-111-2/+2
* src: add support for status dump filterFlorian Westphal2021-08-051-0/+17
* conntrack: Don't use ICMP attrs in decision to build repl tupleLuuk Paulussen2021-03-191-4/+1
* conntrack: add flush filter commandPablo Neira Ayuso2020-10-291-0/+3
* conntrack: sctp: update statesFlorian Westphal2020-08-141-0/+2
* conntrack: dccp print function should use dccp stateFlorian Westphal2020-08-141-1/+1
* conntrack: Fix buffer overflows in __snprintf_protoinfo* like in *2str fnsDaniel Gröber2020-07-011-15/+39
* conntrack: Fix buffer overflow in protocol related snprintf functionsDaniel Gröber2020-07-012-10/+24
* conntrack: Move icmp request>reply type mapping to common fileDaniel Gröber2020-07-014-65/+42
* conntrack: Fix buffer overflow on invalid icmp type in settersDaniel Gröber2020-07-012-7/+12
* conntrack: Fix incorrect snprintf size calculationDaniel Gröber2020-07-011-1/+1
* conntrack: Replace strncpy with snprintf to improve null byte handlingDaniel Gröber2020-07-015-18/+15
* src: Fix nfexp_snprintf return value docsDaniel Gröber2020-07-011-2/+3
* src: Handle negative snprintf return values properlyDaniel Gröber2020-07-013-3/+9
* src: add IPS_HW_OFFLOAD flagPablo Neira Ayuso2020-04-281-1/+3
* expect: parse_mnl: fix gcc compile warningPablo Neira Ayuso2020-04-011-0/+1
* conntrack: support for IPS_OFFLOADPablo Neira Ayuso2019-08-091-2/+4
* conntrack: api: use libmnl API to build the netlink headersPablo Neira Ayuso2019-05-032-7/+51
* src: replace old libnfnetlink builderPablo Neira Ayuso2019-05-022-665/+28
* src: replace old libnfnetlink parserPablo Neira Ayuso2019-05-027-775/+45
* expect: add missing handling for CTA_EXPECT_* attributesPablo Neira Ayuso2019-05-021-3/+61
* src: introduce abi_breakage()Pablo Neira Ayuso2019-05-023-29/+35
* conntrack: add synproxy supportPablo Neira Ayuso2018-03-247-0/+179
* labels: don't crash on NULL labelmapMarcos Paulo de Souza2017-07-251-2/+8
* conntrack: revert getobjopt_is_nat() conditionKen-ichirou MATSUZAWA2017-03-031-8/+4
* conntrack: fix missing break in setobjopt_undo_dnat()Ken-ichirou MATSUZAWA2017-02-281-0/+1
* src: Make the library compile under clangKevin Cernekee2016-08-172-4/+4
* conntrack: labels: add function to fetch default config file locationFlorian Westphal2016-08-082-0/+16
* src: add support for IPv6 NATArturo Borrero2016-05-206-2/+148
* src: add support for IPv6 to struct __nfct_natArturo Borrero2016-05-206-44/+89
* setter: don't touch snat.max_ip in set_attr_dnat_ipv4Florian Westphal2016-01-121-1/+1
* conntrack: add zone attribute to tupleDaniel Borkmann2015-09-2910-20/+198
* conntrack: fix stop timestamp assignmentKen-ichirou MATSUZAWA2015-07-071-1/+1
* src: Use stdint types everywhereFelix Janda2015-05-2517-216/+216
* conntrack: add mark event filterKen-ichirou MATSUZAWA2015-03-132-0/+86
* src/Makefile.am: drop hardcoded -ldlGustavo Zacarias2015-01-211-1/+1
* doc: fix symbol name typo in commentKen-ichirou MATSUZAWA2014-10-081-3/+3
* conntrack: api: add two new bitmask functionsKen-ichirou MATSUZAWA2014-09-111-0/+29
* conntrack: compare: relax MARK/ZONE attribute comparisionFlorian Westphal2014-06-241-42/+45
* conntrack: remove duplicate codeKen-ichirou MATSUZAWA2014-06-211-2/+0
* conntrack: labels: remove dead codeFlorian Westphal2014-02-181-1/+1
* src: fix documentation regarding nfct_catch() and nfexp_catch()Pablo Neira Ayuso2014-01-302-4/+16