conntrack-tools.git/doc/sync/alarm, branch conntrack-tools-1.0.0

conntrackd: fix wrong kernel requirements for TCPWindowTracking in example files

2010-08-04T17:02:58+00:00

This patch fixes wrong Linux kernel requirements in the example configuration files. We require a Linux kernel >= 2.6.36 instead of >= 2.6.35 as the files suggest. Signed-off-by: Pablo Neira Ayuso

conntrackd: warn on TCPWindowTracking option (it requires kernel >= 2.6.35)

2010-07-15T18:15:16+00:00

This patch adds a comment on the TCPWindowTracking option to warn that this will be supported since the Linux kernel 2.6.35. Signed-off-by: Pablo Neira Ayuso

conntrackd: fix ICMPv6 support

2010-07-01T15:38:07+00:00

This patch fixes several minor nitpicks to support IPv6 failover: * ICMPv6 type/code/id were missing in synchronization messages. * The use of '-' as string in the configuration file was not allowed. * Include example in configuration file under doc/. Reported-by: Mohit Mehta Signed-off-by: Pablo Neira Ayuso

conntrackd: add support for TCP window scale factor synchronization

2010-02-11T11:06:37+00:00

This patch adds a new option TCPWindowTracking that allows not to disable TCP window tracking as it occurs by default. Signed-off-by: Pablo Neira Ayuso

conntrackd: fix UDP filtering in configuration file

2010-02-11T10:56:37+00:00

UDP filtering was broken during the addition of the UDP-based synchronization protocol that was introduced in 0.9.14. This patch fixes the problem. Signed-off-by: Pablo Neira Ayuso

conntrackd: add ICMP support for state-synchronization

2009-12-19T14:24:20+00:00

This patch adds state-synchronization for ICMP. You SHOULD use a Linux kernel >= 2.6.31, otherwise this patch can result in tons of state-updates. Signed-off-by: Pablo Neira Ayuso

conntrackd: add support for IPv6 kernel-space filtering via BSF

2009-07-21T14:57:54+00:00

This patch adds the missing support to filter IPv6 from kernel-space by means of the BSF API that libnetfilter_conntrack provides. Signed-off-by: Pablo Neira Ayuso

conntrackd: add clause to enable ctnetlink reliable event delivery

2009-07-21T12:36:18+00:00

This patch adds the NetlinkEventsReliable clause, this is useful to turn on reliable Netlink event delivery. This features requires a Linux kernel >= 2.6.31. Signed-off-by: Pablo Neira Ayuso

sync: add support for DCCP state replication

2009-04-24T10:23:03+00:00

This patch adds initial support for DCCP state replication. Signed-off-by: Pablo Neira Ayuso

sync: add support for SCTP state replication

2009-04-18T17:36:38+00:00

This patch adds initial support for SCTP state replication. Signed-off-by: Pablo Neira Ayuso