conntrack-tools.git/include, branch conntrack-tools-0.9.11

network: fix endianess issue in acknowledgment network header

2009-02-20T19:06:22+00:00

This patch fixes an endianess issue in the acknowledgment network header. This breaks backward compatibility if different conntrackd versions are used. Signed-off-by: Pablo Neira Ayuso

network: fix endianess issue in synchronization network header

2009-02-20T18:51:22+00:00

This patch fixes an endianess issue in the synchronization network header. This breaks backward compatibility if different conntrackd versions are used. Signed-off-by: Pablo Neira Ayuso

headers: don't use NFCT_DIR_MAX in statistics structure

2009-02-20T17:33:52+00:00

This patch removes the use of NFCT_DIR_MAX. This constant is part of the old libnetfilter_conntrack API which has been removed from the git tree. It was introduced in the early days of conntrackd, thus, the use of this constant. Unfortunately, I did not notice until now. Signed-off-by: Pablo Neira Ayuso

conntrackd: add `-f internal' and `-f external' options

2009-02-15T14:40:47+00:00

This patch allows flushing the internal and/or the external cache. The `-f' with no extra parameters still works to flush both the internal and the external cache. Signed-off-by: Pablo Neira Ayuso

config: nl_overrun must be signed int instead of unsigned

2009-02-13T14:48:11+00:00

This patch fixes the disabling on NetlinkOverrunResync, which was broken. Signed-off-by: Pablo Neira Ayuso

src: add Nice clause to set the nice value

2009-02-08T19:55:34+00:00

Signed-off-by: Pablo Neira Ayuso

netlink: add new option NetlinkOverrunResync

2009-02-08T18:13:22+00:00

This patch adds NetlinkOverrunResync. This option can be used to set the amount of time after which the daemon resynchronizes itself with the kernel state-table if it detects a Netlink overrun. Signed-off-by: Pablo Neira Ayuso

src: re-work polling strategy

2009-02-06T16:43:40+00:00

This patch improves the polling support included in 0.9.10. The polling now consists of getting the state table, wait for PollSecs, then purge obsolete entries, and so on. Signed-off-by: Pablo Neira Ayuso

netlink: refactorize several nl_init_*_handler() functions

2009-02-05T20:28:02+00:00

This patch removes: * nl_init_dump_handler() * nl_init_request_handler() * nl_init_resync_handler() since they all look very similar. Signed-off-by: Pablo Neira Ayuso

src: add support for approximate timeout calculation during commit

2009-01-25T16:53:05+00:00

During the commit phase, the entries in the external cache entries are inserted in the kernel conntrack table. Currently, we use a fixed timeout that is specified in the config file. With this patch, if you don't specify the fixed timeout value via CommitTimeout, the daemon calculates the real timeout value during the commit phase. Signed-off-by: Pablo Neira Ayuso