Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | fix bug in nfct_cmp() with IPv6 addresslibnetfilter_conntrack-0.0.94 | Pablo Neira Ayuso | 2008-05-27 | 1 | -4/+4 |
| | |||||
* | define ICMPV6_NI_QUERY and ICMPV6_NI_REPLY if not set | Pablo Neira Ayuso | 2008-05-27 | 1 | -0/+8 |
| | |||||
* | add full support of SCTP | Pablo Neira Ayuso | 2008-05-21 | 7 | -3/+136 |
| | |||||
* | fix nfct_copy with NFCT_CP_ORIG and NFCT_CP_REPLY flags | Pablo Neira Ayuso | 2008-05-20 | 1 | -8/+15 |
| | |||||
* | fix __nfct_l4 structure layout (specifically, ICMP) | Pablo Neira Ayuso | 2008-05-16 | 1 | -8/+82 |
| | | | | fix nfct_cmp(): add port comparison, better ICMP support | ||||
* | compare layer 3 and layer 4 protocol number before addresses | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-05-16 | 1 | -28/+28 |
| | |||||
* | improve nfct_copy | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-05-14 | 2 | -49/+474 |
| | |||||
* | Add missing master tuple getters (reported by Max Wilhelm) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-29 | 2 | -0/+50 |
| | |||||
* | - bump version to 0.0.92 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-16 | 5 | -19/+79 |
| | | | | | | | | - recover the ID support - add support for timeout comparison - ignore set operation for counters and use attributes - fix broken status comparison - statify several __snprintf functions | ||||
* | fix missing bitset in the autocomplete code | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-13 | 1 | -0/+3 |
| | |||||
* | - add nfct_cmp (replacement for nfct_compare a bit more flexible) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-13 | 6 | -63/+243 |
| | | | | | | - add nfct_copy - conditional build of original and reply tuples - fix secmark parsing | ||||
* | add nfct_send | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-09 | 1 | -1/+32 |
| | |||||
* | fix segfault while getting the conntrack ID (reported by Thomas Mader) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-04-04 | 1 | -0/+6 |
| | |||||
* | This patch adds invmap support and duplicate code/id for reply direction, | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-25 | 1 | -0/+43 |
| | | | | | | | | | so inserted conntracks get proper type, code and id. Without this fix "type", "code" and "id" in reply direction were always set to 0. It "automagically" worked for ICMP and ICMP_ECHOREPLY (ICMP_ECHOREPLY==8 -> ICMP_ECHO==*0*), but not with with other ICMP codes nor with ICMPv6. Signed-off-by: Krzysztof Oledzki <ole@ans.pl> | ||||
* | This rather trivial patch adds ICMPv6 support for libnetfilter_conntrack, | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-25 | 4 | -0/+33 |
| | | | | | | but only for the new API - deprecated/extensions was left unchanged. Signed-off-by: Krzysztof Oledzki <ole@ans.pl> | ||||
* | - fix broken 'deprecated backward compatibility'svn_t_libnetfilter_conntrack-0.0.89 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-22 | 11 | -80/+30 |
| | | | | - fix glibc 2.7.20 compilation (based on patch from Paul P. Konkoff) | ||||
* | add support for NAT sequence adjusment | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-02-09 | 4 | -0/+170 |
| | |||||
* | add deprecated/Makefile.am | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-13 | 1 | -0/+3 |
| | |||||
* | Several tree reorganizations: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-13 | 9 | -2/+657 |
| | | | | | - move l3extensions/ and extensions/ to src/deprecated/ - don't create submodules under /usr/lib/libnetfilter_conntrack/ anymore | ||||
* | several cleanups for Makefile.am | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-13 | 3 | -24/+16 |
| | |||||
* | add NFCT_OF_TIME output flag to nfct_snprintf | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-13 | 2 | -2/+43 |
| | |||||
* | add secmark getter and setters | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-01-05 | 2 | -0/+12 |
| | |||||
* | add support for udplite | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-12-17 | 2 | -0/+4 |
| | |||||
* | - add support for secmark | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-12-17 | 4 | -1/+35 |
| | | | | - fix typo s/test_but/test_bit/ | ||||
* | - add missing getter for TCP flags/mask | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-12-15 | 2 | -7/+41 |
| | | | | - add TCP flags/mask attributes if they are set, otherwise skip | ||||
* | fix several compilation warnings (reported by J.Engelhardt) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-12-09 | 2 | -1/+3 |
| | |||||
* | - move old API implementation to deprecated.c | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-12-08 | 3 | -100/+115 |
| | | | | - rename libnetfilter_conntrack.c to main.c | ||||
* | Add support for conntrack master setup | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-12-08 | 3 | -0/+84 |
| | |||||
* | add support for TCP flagssvn_t_libnetfilter_conntrack-0.0.82 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-09-12 | 3 | -0/+46 |
| | |||||
* | The getters have to point to the right sized types, otherwise they don't ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-09-02 | 2 | -6/+6 |
| | | | | work on big-endian. Philip Craig <philipc@snapgear.com> | ||||
* | add layer 4 protocol comparison to nfct_compare()svn_t_libnetfilter_conntrack-0.0.81 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-07-18 | 1 | -0/+12 |
| | |||||
* | - introduce nfct_nfnlh() to use functions like nfnl_rcvbufsiz(): return ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-07-09 | 2 | -8/+6 |
| | | | | | | | read-only nfnl_handle - remove unused build_id() from build.c - bump version to 0.0.81 | ||||
* | fix type in snprintf_default.c (Jozsef Kladecsik)svn_t_libnetfilter_conntrack-0.0.80 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-15 | 1 | -1/+1 |
| | |||||
* | Introduce NFCT_Q_CREATE_UPDATE: create conntrack, if it exists, update it | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-07 | 1 | -7/+12 |
| | |||||
* | nfexp_snprintf behaves as snprintf C99 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-07 | 2 | -27/+14 |
| | |||||
* | nfct_snprintf now returns the number of bytes that would have been written, ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-07 | 2 | -109/+109 |
| | | | | not just the number of bytes written. Emulate snprintf behaviour as in specified in C99 | ||||
* | fix nfct_snprintf behaviour if the buffer passed is too small (similar to ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-07 | 4 | -183/+62 |
| | | | | C99 convention) | ||||
* | introduce NFCT_SOPT_SETUP_* options to simplify object setup | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-04 | 1 | -0/+24 |
| | |||||
* | fix silly bug in nfct_getobjopt(..., NFCT_GOPT_IS_*NAT), always return 1 if ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-04 | 1 | -8/+8 |
| | | | | status flags are set | ||||
* | fix invalid argument error: status flags may not be present in update messages | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-06-04 | 1 | -2/+7 |
| | |||||
* | add support for 64 bits counters (Krzysztof Oledzki) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-29 | 1 | -8/+24 |
| | |||||
* | - delete ctnl_test.c since it contains examples of the old *deprecated* API | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-20 | 2 | -4/+4 |
| | | | | | - fix wrong port display in the XML output (Morten Isaksen) - use ntohs instead htons in snprintf_default.c | ||||
* | - add warning note to ctnl_test.c: old API is deprecated | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-06 | 2 | -23/+54 |
| | | | | | | | | - split expect_api_test.c into small example files expect_*.c - introduce alias tags for original tuple attributes - introduce nfexp_sizeof and nfexp_maxsize - build expectation attributes iif they are set - fix l3num setting in expect/build.c | ||||
* | introduce the new expectation API | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-05-01 | 12 | -18/+904 |
| | |||||
* | - fix compilation warning in snprintf.c | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2007-04-24 | 3 | -3/+146 |
| | | | | | | - introduce the new compare infrastructure: much simple than previous - introduce nfct_maxsize for nf_conntrack object allocated in the stack - more strict checkings in nfct_set_attr: third parameter is const | ||||
* | Set status bit if whatever status flags are available, not only for ASSURED ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-03-21 | 1 | -4/+1 |
| | | | | and SEEN_REPLY | ||||
* | [PATCH] Fix icmp_id setter and doc (Phil Dibowitz <phil@ipom.com>) | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org | 2007-03-17 | 1 | -1/+1 |
| | | | | | | | | ICMP ID is stored as a u_int16_t, but its setter function derefs it's arguement as a u_int8_t. Additionally the api "doc" claims it's a u8, when it's not. This patch fixes both. | ||||
* | - fix inconsistency in the behaviour of nfct_set_attr with ATTR_STATUS: now ↵ | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-02-27 | 2 | -6/+10 |
| | | | | | | status flags bits of conntrack objects in userspace can be set and unset as it happens with other attributes. - nfct_get_objopt with NAT detectors previously checks if the status attribute is set, otherwise it just skips it. | ||||
* | fix wrong documentation in nfct_attr_get_u[*] functions | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-02-12 | 1 | -6/+9 |
| | |||||
* | - fix a crash on trying to set the counters of a conntracksvn_t_libnetfilter_conntrack-0.0.50 | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=pablo/emailAddress=pablo@netfilter.org | 2007-01-05 | 2 | -2/+16 |
| | | | | | | | - document that ATTR_*_COUNTER_*, ATTR_USE and ATTR_ID are unsettable - implement getter for the ATTR_USE attribute Based on patches from Victor Stinner. |