summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* monitor: do not call interval_map_decompose() for concat intervalsFlorian Westphal2021-11-171-1/+6
* parser_json: add raw payload inner header match supportPablo Neira Ayuso2021-11-171-0/+2
* parser: allow for string raw payload basePablo Neira Ayuso2021-11-162-3/+11
* cache: filter out rules by chainPablo Neira Ayuso2021-11-112-45/+81
* cache: missing family in cache filteringPablo Neira Ayuso2021-11-111-4/+8
* cache: do not populate cache if it is going to be flushedPablo Neira Ayuso2021-11-112-5/+77
* cache: move list filter under structPablo Neira Ayuso2021-11-111-11/+11
* doc: update ct timeout section with the state namesFlorian Westphal2021-11-081-1/+1
* evaluate: grab reference in set expression evaluationPablo Neira Ayuso2021-11-081-2/+2
* evaluate: clone variable expression if there is more than one referencePablo Neira Ayuso2021-11-081-1/+10
* mnl: do not build nftnl_set element listPablo Neira Ayuso2021-11-082-25/+91
* src: raw payload match and mangle on inner header / payload dataPablo Neira Ayuso2021-11-085-2/+11
* datatype: add xinteger_type alias to print in hexadecimalPablo Neira Ayuso2021-11-032-1/+17
* evaluate: postpone transport protocol match check after nat expression evalua...Pablo Neira Ayuso2021-11-031-6/+7
* parser: extend limit syntaxJeremy Sowden2021-11-031-0/+5
* parser: add `limit_rate_pkts` and `limit_rate_bytes` rulesJeremy Sowden2021-11-031-62/+59
* parser: add new `limit_bytes` ruleJeremy Sowden2021-11-031-6/+9
* src: Support netdev egress hookLukas Wunner2021-10-282-0/+5
* cache: disable NFT_CACHE_SETELEM_BIT on --terse listing onlyPablo Neira Ayuso2021-10-281-2/+2
* cache: ensure evaluate_cache_list flags are set correctlyChris Arges2021-10-271-0/+1
* cache: honor table in set filteringPablo Neira Ayuso2021-10-271-1/+2
* cache: honor filter in set listing commandsPablo Neira Ayuso2021-10-271-0/+2
* cache: always set on NFT_CACHE_REFRESH for listingPablo Neira Ayuso2021-10-271-6/+7
* main: _exit() if setuidFlorian Westphal2021-10-191-0/+4
* rule: replace three conditionals with oneJeremy Sowden2021-10-121-5/+3
* rule: fix stateless output after listing sets containing countersJeremy Sowden2021-10-121-1/+3
* rule: remove fake stateless output of named countersJeremy Sowden2021-10-121-7/+6
* cache: unset NFT_CACHE_SETELEM with --terse listingPablo Neira Ayuso2021-10-021-3/+12
* cache: filter out sets and maps that are not requestedPablo Neira Ayuso2021-09-301-2/+19
* cache: filter out tables that are not requestedPablo Neira Ayuso2021-09-303-13/+35
* cache: finer grain cache population for list commandsPablo Neira Ayuso2021-09-291-2/+23
* cache: set on cache flags for nested notationPablo Neira Ayuso2021-09-291-0/+10
* evaluate: check for missing transport protocol match in nat map with concaten...Pablo Neira Ayuso2021-09-291-0/+12
* evaluate: check for concatenation in set data datatypePablo Neira Ayuso2021-09-291-1/+2
* monitor: honor NLM_F_EXCL netlink flagPablo Neira Ayuso2021-09-291-1/+7
* monitor: honor NLM_F_APPEND flag for rulesPablo Neira Ayuso2021-09-291-14/+26
* monitor: display rule position handlePablo Neira Ayuso2021-09-291-1/+4
* netlink: dynset: set compound expr dtype based on set key definitionFlorian Westphal2021-09-291-1/+45
* payload: don't adjust offsets of autogenerated dependency expressionsFlorian Westphal2021-09-292-1/+4
* netlink: reset temporary set element stmt list after list splicePablo Neira Ayuso2021-09-161-1/+1
* src: revert hashtable for expression handlersPablo Neira Ayuso2021-09-152-32/+10
* netlink: rework range_expr_to_prefix()Pablo Neira Ayuso2021-09-091-30/+36
* meta: skip -T for hour and date formatPablo Neira Ayuso2021-09-091-24/+9
* src: Check range bounds before converting to prefixXiao Liang2021-09-061-6/+9
* datatype: time_print() ignores -TPablo Neira Ayuso2021-09-061-0/+5
* rule: remove redundant meta protocol from the evaluation stepPablo Neira Ayuso2021-09-031-23/+54
* netlink_delinearize: incorrect meta protocol dependency kill againPablo Neira Ayuso2021-09-031-45/+61
* parser_json: Fix error reporting for invalid syntaxPhil Sutter2021-09-011-10/+8
* netlink_delinearize: incorrect meta protocol dependency killPablo Neira Ayuso2021-08-261-3/+19
* cache: provide a empty list for flowtables and objects when request failsPablo Neira Ayuso2021-08-261-16/+20