summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* src: quote user-defined strings when used from rule selectorsPablo Neira Ayuso2016-08-184-12/+16
* ct: release ct_label table on exitPablo Neira Ayuso2016-08-171-0/+5
* ct: add missing slash to connlabel pathPablo Neira Ayuso2016-08-171-1/+1
* scanner: don't break line on include error messagePablo Neira Ayuso2016-08-101-1/+1
* scanner: don't fall back on current directory if include is not foundPablo Neira Ayuso2016-08-101-7/+6
* scanner: honor absolute and relative paths via include filePablo Neira Ayuso2016-08-101-7/+17
* netlink: make checksum fixup work with odd-sized header fieldsFlorian Westphal2016-08-011-4/+35
* netlink: decode payload statmentFlorian Westphal2016-08-011-5/+178
* evaluate: add support to set IPv6 non-byte header fieldsFlorian Westphal2016-08-011-4/+76
* evaluate: add small helper to check if payload expr needs binop adjustmentFlorian Westphal2016-08-011-2/+7
* payload: print base and raw values for unknown payloadsFlorian Westphal2016-08-011-1/+13
* netlink: add __binop_adjust helperFlorian Westphal2016-08-011-4/+9
* parser_bison: keep map flag around when flags are specifiedPablo Neira Ayuso2016-07-271-1/+1
* xt: use struct xt_xlate_{mt,tg}_paramsPablo Neira Ayuso2016-07-251-5/+15
* ct: use nftables sysconf location for connlabel configurationFlorian Westphal2016-07-211-2/+5
* meta: add random supportFlorian Westphal2016-07-192-0/+5
* parser_bison: fix typo in symbol redefinition error reportingPablo Neira Ayuso2016-07-131-1/+1
* src: add xt compat supportPablo Neira Ayuso2016-07-135-0/+388
* src: expose delinearize/linearize structures and stmt_error()Pablo Neira2016-07-133-36/+17
* netlink_linearize: skip NFTNL_EXPR_DYNSET_TIMEOUT attribute if timeout is unsetPablo Neira Ayuso2016-07-121-2/+3
* parser_bison: restore parsing of dynamic set element updatesPablo Neira Ayuso2016-07-121-1/+13
* datatype: time_type should send milliseconds to userspacePablo Neira Ayuso2016-07-091-1/+2
* segtree: don't check for overlaps if set definition is emptyPablo Neira Ayuso2016-06-221-1/+1
* src: use new definitions from libnftnlPablo Neira Ayuso2016-06-153-11/+11
* payload: don't update protocol context if we can't find a descriptionFlorian Westphal2016-06-071-0/+3
* evaluate: fix "list set" unexpected behaviourPablo M. Bermudo Garay2016-06-011-1/+2
* src: add support for display maps contentPablo M. Bermudo Garay2016-05-313-0/+16
* src: add 'list maps' supportPablo M. Bermudo Garay2016-05-314-1/+14
* parser: cap comment length to 128 bytesCarlos Falgueras García2016-05-301-0/+5
* parser: Consolidate comment productionCarlos Falgueras García2016-05-301-10/+15
* parser: fix crash if we add a chain with an error chain typeLiping Zhang2016-05-301-2/+4
* meta: fix a format error display when we set priority to root or noneLiping Zhang2016-05-301-2/+4
* meta: fix endianness in priorityLiping Zhang2016-05-301-1/+1
* set_elem: Use libnftnl/udata to store set element commentCarlos Falgueras García2016-05-301-4/+46
* netlink_delinerize: don't use meta_match_postprocess for ct ppFlorian Westphal2016-05-251-7/+29
* netlink_linearize: do not duplicate user data when linearizing user dataCarlos Falgueras García2016-05-251-8/+3
* rule: add support for display flow tables contentPablo M. Bermudo Garay2016-05-203-0/+17
* rule: add 'list flow tables' supportPablo M. Bermudo Garay2016-05-203-2/+19
* evaluate: fix crash if we add an error format ruleLiping Zhang2016-05-141-1/+1
* parser_bison: update flow table syntaxPablo Neira Ayuso2016-05-132-6/+8
* src: add flow statementPatrick McHardy2016-05-138-12/+228
* stmt: support generating stateful statements outside of rule contextPatrick McHardy2016-05-132-32/+60
* netlink_delinearize: support parsing statements not contained within a rulePatrick McHardy2016-05-131-28/+42
* set: explicitly supply name to implicit set declarationsPatrick McHardy2016-05-131-3/+6
* set: allow non-constant implicit set declarationsPatrick McHardy2016-05-131-1/+3
* src: declare interval_map_decompose() from header filePablo Neira Ayuso2016-05-132-4/+0
* netlink: several function constificationsPablo Neira Ayuso2016-05-131-10/+10
* evaluate: check for NULL datatype in rhs in lookup exprArturo Borrero2016-05-131-9/+25
* src: add ecn supportPablo Neira Ayuso2016-05-113-3/+38
* src: add dscp supportPablo Neira Ayuso2016-05-113-7/+50