conntrack-tools.git/doc/stats, branch conntrack-tools-1.0.0

conntrackd: PollSecs goes in the General clause for statistics

2010-02-28T15:19:13+00:00

This patch fixes the configuration file that includes an example of the PollSecs clause in Stats. This is wrong since it should go in the General clause. Signed-off-by: Pablo Neira Ayuso

conntrackd: fix UDP filtering in configuration file

2010-02-11T10:56:37+00:00

UDP filtering was broken during the addition of the UDP-based synchronization protocol that was introduced in 0.9.14. This patch fixes the problem. Signed-off-by: Pablo Neira Ayuso

conntrackd: add support for IPv6 kernel-space filtering via BSF

2009-07-21T14:57:54+00:00

This patch adds the missing support to filter IPv6 from kernel-space by means of the BSF API that libnetfilter_conntrack provides. Signed-off-by: Pablo Neira Ayuso

conntrackd: add clause to enable ctnetlink reliable event delivery

2009-07-21T12:36:18+00:00

This patch adds the NetlinkEventsReliable clause, this is useful to turn on reliable Netlink event delivery. This features requires a Linux kernel >= 2.6.31. Signed-off-by: Pablo Neira Ayuso

conntrackd: change scheduler and priority via configuration file

2009-04-14T08:43:16+00:00

With this patch, you can change the scheduler policy and priority for conntrackd. Using a RT scheduler policy reduces the chances to hit ENOBUFS in Netlink. Signed-off-by: Pablo Neira Ayuso

config: add NetlinkBufferSize and NetlinkBufferSizeMaxGrowth

2009-02-21T13:18:56+00:00

This patch adds two alias that removes an inconsistency in the configuration file names. Now, the clauses that refers to Netlink starts by the prefix "Netlink". Signed-off-by: Pablo Neira Ayuso

src: add Nice clause to set the nice value

2009-02-08T19:55:34+00:00

Signed-off-by: Pablo Neira Ayuso

src: add state polling support (oppossed to current event-driven)

2009-01-17T17:03:53+00:00

This patch adds the clause PollSecs that changes the normal behaviour of conntrackd. With PollSecs set to > 0, conntrackd polls every N seconds the entries. This is the opposed behaviour of an event-driven behaviour but may be useful for those that have really strong limitations in terms of CPU consumption and want to perform a relaxed replication. Signed-off-by: Pablo Neira Ayuso

config: use /var/run to create the UNIX socket file

2008-09-18T16:44:23+00:00

This patch removes the use of /tmp to create the UNIX socket file to communicate with conntrackd in the example configuration files. This was OK in the early alpha days, but not anymore. Signed-off-by: Pablo Neira Ayuso

fix: wrong information related to default logging action

2008-08-01T09:59:55+00:00

Logging is set off by default instead of what the example files state. Signed-off-by: Pablo Neira Ayuso