conntrack-tools.git/doc, branch conntrack-tools-0.9.11

config: add NetlinkBufferSize and NetlinkBufferSizeMaxGrowth

2009-02-21T13:18:56+00:00

This patch adds two alias that removes an inconsistency in the configuration file names. Now, the clauses that refers to Netlink starts by the prefix "Netlink". Signed-off-by: Pablo Neira Ayuso

doc: revert primary-backup-2.6.29-and-higher.sh script

2009-02-21T13:00:25+00:00

This patch reverts primary-backup-2.6.29-and-higher.sh. This script is not safe for production enviroments until the commit phase guarantees that the state-change propagation over netlink is reliable. This script should be ready for 2.6.30 if the appropriate kernel patches go into mainline in time. Signed-off-by: Pablo Neira Ayuso

doc: add bulk update to primary-script.sh script

2009-02-15T17:47:50+00:00

This patch updates the script to remark the fact that it should be used with Linux kernel < 2.6.29. Moreover, it adds a bulk-update command after the commit in the primary path to avoid any race condition (the backup may request a resync while this primary is still committing the entries with an empty internal cache). This is hackish, but I think that this is the best way to do this for systems running a Linux kernel < 2.6.29. Signed-off-by: Pablo Neira Ayuso

doc: add new primary-backup.sh script for >= 2.6.29

2009-02-15T17:46:08+00:00

This patch adds a new primary-backup.sh script for Linux kernels >= 2.6.29. This script takes advantage of the user-space event reporting that ctnetlink does since this kernel version. Signed-off-by: Pablo Neira Ayuso

doc: unset ACKWindowSize in example configuration files

2009-02-15T15:11:28+00:00

This patch unset ACKWindowSize since it already sets the clause to its default value. Signed-off-by: Pablo Neira Ayuso

src: add Nice clause to set the nice value

2009-02-08T19:55:34+00:00

Signed-off-by: Pablo Neira Ayuso

netlink: add new option NetlinkOverrunResync

2009-02-08T18:13:22+00:00

This patch adds NetlinkOverrunResync. This option can be used to set the amount of time after which the daemon resynchronizes itself with the kernel state-table if it detects a Netlink overrun. Signed-off-by: Pablo Neira Ayuso

doc: increase hashtable bucket size and limits in example files

2009-01-25T18:15:01+00:00

This patch details a bit more the hashtable parameters. Moreover, it increases the default size of the hashtable. Signed-off-by: Pablo Neira Ayuso

doc: use 'From' instead of 'from' in the example configfiles

2009-01-25T17:50:43+00:00

This patch fixes a wrong use of 'from' instead of 'From' in the example configuration files. Reported-by: Yoann Juet Signed-off-by: Pablo Neira Ayuso

doc: unset CommitTimeout by default

2009-01-25T17:21:26+00:00

This patch disables CommitTimeout by default. The daemon now uses the approximate timeout calculation by default. Signed-off-by: Pablo Neira Ayuso