summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* parser_bison: missing relational operation on flag listPablo Neira Ayuso2021-05-024-0/+31
* parser: allow to load stateful ct connlimit elements in setsLaura Garcia Liebana2021-05-022-0/+25
* evaluate: check if nat statement map specifies a transport header exprFlorian Westphal2021-04-291-1/+37
* mnl: Increase BATCH_PAGE_SIZE to support huge rulesetsPhil Sutter2021-04-211-4/+4
* Makefile: missing owner.h filePablo Neira Ayuso2021-04-031-0/+1
* files: move example files away from /etcJan Engelhardt2021-04-031-2/+1
* cache: bail out if chain list cannot be fetched from kernelPablo Neira Ayuso2021-04-031-1/+1
* cache: add hashtable cache for setsPablo Neira Ayuso2021-04-0310-75/+128
* cache: check for NULL chain in cache_init()Pablo Neira Ayuso2021-04-031-0/+5
* cache: statify chain_cache_dump()Pablo Neira Ayuso2021-04-032-2/+2
* evaluate: use chain hashtable for lookupsPablo Neira Ayuso2021-04-034-19/+6
* src: split chain list in tablePablo Neira Ayuso2021-04-034-13/+19
* cache: rename chain_htable to cache_chain_htPablo Neira Ayuso2021-04-033-8/+8
* proto: replace vlan ether type with 8021qFlorian Westphal2021-04-0317-36/+39
* tests: add 8021.AD vlan test casesFlorian Westphal2021-04-035-0/+450
* payload: be careful on vlan dependency removalFlorian Westphal2021-04-031-3/+26
* proto: add 8021ad as mnemonic for IEEE 802.1AD (0x88a8) ether typeFlorian Westphal2021-04-032-0/+2
* src: vlan: allow matching vlan id insider 802.1ad frameFlorian Westphal2021-04-031-0/+3
* netlink: don't crash when set elements are not evaluated as expectedFlorian Westphal2021-04-012-0/+6
* parser_bison: simplify flowtable offload flag parserPablo Neira Ayuso2021-03-311-7/+4
* mnl: do not set flowtable flags twicePablo Neira Ayuso2021-03-311-5/+0
* rule: remove semicolon in flowtable offloadPablo Neira Ayuso2021-03-251-1/+1
* parser: fix scope closure of COUNTER tokenFlorian Westphal2021-03-255-3/+99
* src: add datatype->describe()Pablo Neira Ayuso2021-03-253-0/+18
* nftables: add flags offload to flowtableFrank Wunderlich2021-03-255-0/+26
* doc: no need to define a set in ct statePablo Neira Ayuso2021-03-241-1/+1
* doc: use symbolic names for chain prioritiesSimon Ruderich2021-03-244-16/+16
* tests: shell: fix 0025empty_dynset_0Pablo Neira Ayuso2021-03-241-1/+1
* tests: shell: flowtable add after delete in batchPablo Neira Ayuso2021-03-242-0/+63
* segtree: release single element already contained in an intervalPablo Neira Ayuso2021-03-243-1/+23
* parser: add missing scope_close annotation for RT keywordFlorian Westphal2021-03-241-1/+1
* scanner: log: move to own scopeFlorian Westphal2021-03-243-5/+13
* scanner: counter: move to own scopeFlorian Westphal2021-03-243-18/+21
* scanner: add support for scope nestingFlorian Westphal2021-03-242-1/+21
* scanner: avoid -fasan heap overflow warningsFlorian Westphal2021-03-181-1/+1
* scanner: secmark: move to own scopeFlorian Westphal2021-03-163-10/+13
* scanner: move until,over,used keywords away from init stateFlorian Westphal2021-03-161-3/+5
* scanner: quota: move to own scopeFlorian Westphal2021-03-163-12/+15
* scanner: limit: move to own scopeFlorian Westphal2021-03-163-15/+20
* scanner: vlan: move to own scopeFlorian Westphal2021-03-163-5/+10
* scanner: remove saddr/daddr from initial stateFlorian Westphal2021-03-161-2/+4
* scanner: arp: move to own scopeFlorian Westphal2021-03-163-9/+14
* scanner: add ether scopeFlorian Westphal2021-03-163-6/+9
* scanner: add fib scopeFlorian Westphal2021-03-163-2/+5
* scanner: ip6: move to own scopeFlorian Westphal2021-03-163-13/+18
* scanner: ip: move to own scopeFlorian Westphal2021-03-163-18/+23
* scanner: ct: move to own scopeFlorian Westphal2021-03-163-38/+43
* src: move remaining cache functions in rule.c to cache.cPablo Neira Ayuso2021-03-113-205/+209
* scanner: socket: move to own scopeFlorian Westphal2021-03-113-5/+9
* scanner: rt: move to own scopeFlorian Westphal2021-03-113-6/+11