conntrack-tools.git/include, branch conntrack-tools-0.9.10

src: add support for approximate timeout calculation during commit

2009-01-25T16:53:05+00:00

During the commit phase, the entries in the external cache entries are inserted in the kernel conntrack table. Currently, we use a fixed timeout that is specified in the config file. With this patch, if you don't specify the fixed timeout value via CommitTimeout, the daemon calculates the real timeout value during the commit phase. Signed-off-by: Pablo Neira Ayuso

cache: move lifetime feature to main cache code

2009-01-25T16:53:02+00:00

The lifetime feature is used by all working modes, it is useful to know how long it has been an entry living in the cache. This patch moves the lifetime feature to the main caching code. Signed-off-by: Pablo Neira Ayuso

src: change behaviour of `-t' option

2009-01-25T16:52:56+00:00

With this patch, the `-t' option adds an alarm that will flush the cache after CONFIG(purge_timeout) seconds specified in the config file. This looks much cleaner and more performance that looping on the entire conntrack table to set the new timeout of every single entry. Signed-off-by: Pablo Neira Ayuso

cache: mangle timeout inside nl_*_conntrack() functions

2009-01-25T16:51:18+00:00

This patch moves the timeout mangling inside nl_*_conntrack(). Signed-off-by: Pablo Neira Ayuso

cache: remove nl_exist_conntrack() function

2009-01-25T16:51:09+00:00

This function is a synonimous of nl_get_conntrack(), use the get function instead. Signed-off-by: Pablo Neira Ayuso

cache_iterators: start a clean session if commit finds an entry

2009-01-25T12:44:22+00:00

The current commit code updates an entry it still exists in the kernel. With this patch, we delete the entry and create a new one to make sure that we start a clean session. Signed-off-by: Pablo Neira Ayuso

src: obsolete `DestroyTimeout' clause

2009-01-21T12:51:21+00:00

This patch obsoletes `DestroyTimeout' which has no clients anymore. Signed-off-by: Pablo Neira Ayuso

conntrack: add -C command to display the counter

2009-01-17T19:34:13+00:00

This patch adds the -C command, to display the table counter. In the case of `-C conntrack' the tool reads the proc interface. For expectation, it loops on the table to count the number of entries (as there is not proc interface to display the number of expectations). Signed-off-by: Pablo Neira Ayuso

src: add `-s queue' and change `-v' behaviour

2009-01-17T19:33:30+00:00

This patch moves the existing `-v' behaviour to `-s queue' where it really belongs. The `-v' option is now left to display the version which is the common use of it. # conntrackd -v Connection tracking userspace daemon v0.9.9. Licensed under GPLv2. (C) 2006-2009 Pablo Neira Ayuso Signed-off-by: Pablo Neira Ayuso

ftfw: add ResendQueueSize and deprecate ResendBufferSize clauses

2009-01-17T17:24:57+00:00

This patch adds ResendQueueSize, which sets the number of objects that can be stored in the resend queue waiting to be confirmed. The ResendBufferSize clause has been deprecated. Signed-off-by: Pablo Neira Ayuso