conntrack-tools.git, branch conntrack-tools-1.0.0

build: bump version to 1.0.0

2011-02-27T01:48:16+00:00

Signed-off-by: Pablo Neira Ayuso

doc: prepare 1.0.0 release in conntrack-tools manual

2011-02-27T01:46:52+00:00

Remove reference which states that this is still under development and refer to version 1.0.0. Signed-off-by: Pablo Neira Ayuso

build: conntrack-tools now requires libnetfilter_conntrack >= 0.9.1

2011-02-24T18:41:01+00:00

The existing code requires new features that went into the current library version. Signed-off-by: Pablo Neira Ayuso

doc: add missing conntrackd -s invocation with options

2011-02-22T15:25:36+00:00

Signed-off-by: Pablo Neira Ayuso

doc: add reference to the CT target again

2011-02-22T15:05:09+00:00

Now that we have fixed several aspects of the event filtering in 2.6.38, I reintroduce the documentation for this feature. Signed-off-by: Pablo Neira Ayuso

conntrack: support SYN_SENT2 TCP state as --state parameter

2011-02-22T14:49:14+00:00

Since Linux kernel 2.6.31, the LISTEN state is SYN_SENT2. With this patch, we allow to use -p tcp --state SYN_SENT2 which was not possible so far. Signed-off-by: Pablo Neira Ayuso

conntrack: display informative message if expectation table is flushed

2011-02-22T14:34:59+00:00

With this patch, we display the following message after: # conntrack -F expect conntrack v0.9.15 (conntrack-tools): expectation table has been emptied. To make it consistent with the message displayed with conntrack -F. Signed-off-by: Pablo Neira Ayuso

doc: document redundant link support for conntrackd

2011-02-18T12:20:37+00:00

Signed-off-by: Pablo Neira Ayuso

doc: document -s option of conntrackd in the manual

2011-02-18T12:09:05+00:00

Signed-off-by: Pablo Neira Ayuso

conntrackd: remove use of deprecated nfct_maxsize()

2011-02-18T11:15:52+00:00

This patch removes the use of nfct_maxsize() and several abusive stack-based allocations. Signed-off-by: Pablo Neira Ayuso