conntrack-tools.git/doc/manual, branch upstreamconntrack-tools i.e. conntrack and conntrackd (mirror of https://github.com/vyos/conntrack-tools.git)
https://git.amelek.net/vyos/conntrack-tools.git/atom?h=upstream2015-10-02T06:43:42+00:00Merge remote-tracking branch 'source/master' into upstream2015-10-02T06:43:42+00:00Alex Harpindevelopment@landsofshadow.co.uk2015-10-02T06:43:42+00:00urn:sha1:ef5ae91676c8ada2a12ea72f889a54452dd94981nfct: update syntax in documentation2015-09-08T18:10:13+00:00Pablo Neira Ayusopablo@netfilter.org2015-08-21T17:18:38+00:00urn:sha1:882bb111285a3a4465995b4af03040a291145d7b
Since dd73ceecdbe8 ("nfct: Update syntax to specify command before subsystem")
the command comes before the object type. Update documentation accordingly.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
conntrackd: userspace SSDP helper2014-03-12T12:34:57+00:00Ash Hughesashley.hughes@blueyonder.co.uk2014-03-08T21:13:34+00:00urn:sha1:92246dcc1fdcf222302a42926e0e95af2c30463e
Here is a patch which adds a userspace conntrack helper for the SSDP
protocol. This is based on the code found at:
http://marc.info/?t=132945775100001&r=1&w=2
I'm not sure how to get my laptop to play at IPv6, so I've not tested
this part, but I've tested the IPv4 section and it works.
Signed-off-by: Ash Hughes <ashley.hughes@blueyonder.co.uk>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
doc: detail user-space helper support2012-10-08T10:22:28+00:00Pablo Neira Ayusopablo@netfilter.org2012-10-08T10:22:28+00:00urn:sha1:affe4656f3aeeba4040f9d63efd7719ef0345ae9
This patch adds documentation on how to enable user-space helper support.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
conntrackd: fix crash if ExpectationSync is enabled on old Linux kernels2012-10-04T08:42:43+00:00Pablo Neira Ayusopablo@netfilter.org2012-10-03T20:19:25+00:00urn:sha1:3f845636159298fb18b6d6c455066d0344a61bee
ExpectationSync requires Linux kernel >= 3.5 to work sanely, document this.
Still, we don't want to crash if someone enables expectation sync with
old Linux kernels (like 2.6.32).
Reported-by: James Gutholm <gutholmj@evergreen.edu>
Tested-by: James Gutholm <gutholmj@evergreen.edu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
doc: fix documentation on ExpectationSync and H.323 helper2012-06-16T15:42:28+00:00Pablo Neira Ayusopablo@netfilter.org2012-06-16T15:42:28+00:00urn:sha1:c88266b35ba130e804422ce2fe0da6704d620bd6
The H.323 helper is actually composed of three helpers:
ras
q.931
h.245
We have to specify those in the configuration file since h.323 is
not any known helper itself.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
doc: fix example on how to filter events via iptables CT target2012-03-05T22:14:32+00:00Pablo Neira Ayusopablo@netfilter.org2012-03-05T22:13:12+00:00urn:sha1:1de3034f8c4f597cbe4be35b2f84e2848e46e64e
You have to use this:
iptables -I PREROUTING -t raw -j CT --ctevents assured,destroy
instead of:
iptables -I PREROUTING -t raw -j CT --ctevents assured
Otherwise, conntrackd cache gets full since no destroy events
are delivered.
Reported-by: Kerin Millar <kerframil@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Updating upstream with merged content from netfilter conntrack-tools version 1.0.12012-01-12T22:45:24+00:00Gaurav Sinhagaurav.sinha@vyatta.com2012-01-12T22:45:24+00:00urn:sha1:ca37a710d526d17490ebdc3af760bfddd316426ddoc: update conntrack-tools manual to detail expectation support2012-01-10T00:54:45+00:00Pablo Neira Ayusopablo@netfilter.org2012-01-07T17:40:48+00:00urn:sha1:414fedd879fdc3cd0a910acd2fd9262251a6bfe7
This patch updates the user manual on how to enable the expectation
support for conntrackd.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
doc: prepare 1.0.0 release in conntrack-tools manual2011-02-27T01:46:52+00:00Pablo Neira Ayusopablo@netfilter.org2011-02-27T01:46:52+00:00urn:sha1:f5ac64e749b95da5c85410a1b6e20e5b3f852118
Remove reference which states that this is still under development
and refer to version 1.0.0.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>