conntrack-tools.git/doc, branch conntrack-tools-0.9.12

doc: set nice to -20 in example config files

2009-03-31T19:09:26+00:00

This patch sets the most favourable nice value for conntrackd in the default configuration files. This is generally a good idea to reduce the chances to hit ENOBUFS. Signed-off-by: Pablo Neira Ayuso

udp: fix missing scope_id in the socket creation

2009-03-20T13:05:31+00:00

This patch fixes an EINVAL error returned by bind() when opening an UDP server socket to propagate state-changes over the dedicated link. This patch also includes the change of the example configuration files in case that you want to use UDP over IPv6. Signed-off-by: Pablo Neira Ayuso

sync-mode: add unicast UDP support to propagate state-changes

2009-03-13T13:00:59+00:00

This patch adds support for unicast UDP to the channel infrastructure. With this patch, you can select UDP unicast to propagate state-changes instead of multicast. Signed-off-by: Pablo Neira Ayuso

doc: fix broken link to ulogd2 in the manual

2009-02-23T09:20:48+00:00

Reported-by: Ralf Signed-off-by: Pablo Neira Ayuso

config: add NetlinkBufferSize and NetlinkBufferSizeMaxGrowth

2009-02-21T13:18:56+00:00

This patch adds two alias that removes an inconsistency in the configuration file names. Now, the clauses that refers to Netlink starts by the prefix "Netlink". Signed-off-by: Pablo Neira Ayuso

doc: revert primary-backup-2.6.29-and-higher.sh script

2009-02-21T13:00:25+00:00

This patch reverts primary-backup-2.6.29-and-higher.sh. This script is not safe for production enviroments until the commit phase guarantees that the state-change propagation over netlink is reliable. This script should be ready for 2.6.30 if the appropriate kernel patches go into mainline in time. Signed-off-by: Pablo Neira Ayuso

doc: add bulk update to primary-script.sh script

2009-02-15T17:47:50+00:00

This patch updates the script to remark the fact that it should be used with Linux kernel < 2.6.29. Moreover, it adds a bulk-update command after the commit in the primary path to avoid any race condition (the backup may request a resync while this primary is still committing the entries with an empty internal cache). This is hackish, but I think that this is the best way to do this for systems running a Linux kernel < 2.6.29. Signed-off-by: Pablo Neira Ayuso

doc: add new primary-backup.sh script for >= 2.6.29

2009-02-15T17:46:08+00:00

This patch adds a new primary-backup.sh script for Linux kernels >= 2.6.29. This script takes advantage of the user-space event reporting that ctnetlink does since this kernel version. Signed-off-by: Pablo Neira Ayuso

doc: unset ACKWindowSize in example configuration files

2009-02-15T15:11:28+00:00

This patch unset ACKWindowSize since it already sets the clause to its default value. Signed-off-by: Pablo Neira Ayuso

src: add Nice clause to set the nice value

2009-02-08T19:55:34+00:00

Signed-off-by: Pablo Neira Ayuso