conntrack-tools.git/extensions, branch conntrack-tools-1.0.0conntrack-tools i.e. conntrack and conntrackd (mirror of https://github.com/vyos/conntrack-tools.git)
https://git.amelek.net/vyos/conntrack-tools.git/atom?h=conntrack-tools-1.0.02011-02-22T14:49:14+00:00conntrack: support SYN_SENT2 TCP state as --state parameter2011-02-22T14:49:14+00:00Pablo Neira Ayusopablo@netfilter.org2011-02-22T14:49:14+00:00urn:sha1:ad17836eb03998236be259af2312c4a11b3e45f0
Since Linux kernel 2.6.31, the LISTEN state is SYN_SENT2. With this
patch, we allow to use -p tcp --state SYN_SENT2 which was not possible
so far.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
conntrack: fix manually created TCP entries with window tracking enabled2009-12-23T22:29:06+00:00Pablo Neira Ayusopablo@netfilter.org2009-12-23T22:29:06+00:00urn:sha1:b78aa333ae1a73683afd44b8819186a91784d929
With this patch, we allow to manually create TCP entries in the table.
Basically, we disable TCP window tracking for this entry to avoid
problems.
Reported-by: Roman Fiedler <roman.fiedler@ait.ac.at>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
conntrack: add DCCP role parameter for conntrack creation2009-04-24T10:22:49+00:00Pablo Neira Ayusopablo@netfilter.org2009-04-24T10:22:49+00:00urn:sha1:7866b938a909439fa09ea7f16f8676cdac5ea532
This patch adds `--role' parameter for DCCP which is required to
create entries.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
conntrack: add GRE support2009-04-18T15:05:13+00:00Pablo Neira Ayusopablo@netfilter.org2009-04-18T15:05:13+00:00urn:sha1:a9554339451a0698e33b0964d0e8113f714470a4
This patch adds GRE support for the command line tool conntrack.
With this patch, we support all protocols available in the kernel.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.
conntrack: add DCCP support2009-04-11T14:42:20+00:00Pablo Neira Ayusopablo@netfilter.org2009-04-11T14:42:20+00:00urn:sha1:549d78e74c1140b1a4dcd35e44e64d51a3c613e6
This patch adds DCCP support for the command line tool conntrack.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
conntrack: add SCTP support2009-04-11T14:42:20+00:00Pablo Neira Ayusopablo@netfilter.org2009-04-11T14:42:20+00:00urn:sha1:19f183958c1ce9d8faf312c7e4009dee5a10e1ac
This patch adds SCTP support to the command line tool conntrack.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
conntrack: add UDPlite support2009-04-11T14:42:20+00:00Pablo Neira Ayusopablo@netfilter.org2009-04-11T14:42:20+00:00urn:sha1:ff8cf014f089f1dc36898188f962974091c71c7d
This patch adds UDPlite support for the command line tool conntrack.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
conntrack: fix coupled-options sanity checkings2009-04-11T14:42:20+00:00Pablo Neira Ayusopablo@netfilter.org2009-04-11T14:42:20+00:00urn:sha1:d406e609f664a8151f9e372bbb8fd2ec2c724d35
This patch extends the generic_opt_check() function to add
extra information on the possible option combinations. Under
some specific situations, like the creation and getting of
a conntrack, you may specify the original or the reply tuple
but at least one MUST be present. This handling has been
always tricky, it still remains but we're more user friendly
at least.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
conntrack: save one indent in the TCP support2009-04-11T13:28:11+00:00Pablo Neira Ayusopablo@netfilter.org2009-04-11T13:28:11+00:00urn:sha1:f1ea9b9233406c479c91e36c250c21dd3ef76496
This patch saves one extra indent in the switch().
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
conntrack: cleanup error output with `-p tcp --state'2009-04-11T13:22:18+00:00Pablo Neira Ayusopablo@netfilter.org2009-04-11T13:22:18+00:00urn:sha1:b0295040203d269149fda14a3d6b5b4e2262c5ab
This patch also removes a new line that is not required in the
error message.
# conntrack -L -p tcp --state CLOS
conntrack v0.9.12 (conntrack-tools): Unknown TCP state CLOS
> empty line <
Try `conntrack -h' or 'conntrack --help' for more information.