conntrack-tools.git/include, branch conntrack-tools-0.9.14

conntrackd: add ICMP support for state-synchronization

2009-12-19T14:24:20+00:00

This patch adds state-synchronization for ICMP. You SHOULD use a Linux kernel >= 2.6.31, otherwise this patch can result in tons of state-updates. Signed-off-by: Pablo Neira Ayuso

conntrackd: add `DisableInternalCache' clause

2009-10-20T23:43:07+00:00

This patch adds the clause `DisableInternalCache' that allows you to bypass the internal cache. This clause can only be used with the notrack synchronization mode. Signed-off-by: Pablo Neira Ayuso

conntrackd: add retention queue for TCP errors

2009-09-23T16:12:37+00:00

Under stress, the TCP stack may return EAGAIN if there is not space left in the sender buffer. We also enqueue any other error. Signed-off-by: Pablo Neira Ayuso

conntrackd: fix re-connect with multiple TCP channels

2009-09-23T13:18:30+00:00

This patch fixes a bug in the TCP support that breaks re-connections of the client side if several TCP channels are used in the configuration file. Signed-off-by: Pablo Neira Ayuso

conntrackd: fix MTU for TCP channels

2009-09-11T14:19:41+00:00

Use the TCP header size (20 bytes) instead of the UDP header size (8 bytes) to calculate the maximum packet size. Reported-by: Samuel Gauthier Signed-off-by: Pablo Neira Ayuso

conntrackd: net message memory allocation is unsafe

2009-09-03T10:18:43+00:00

We cannot assume that we will not write in the net message before we send it, because the memory allocated for the net message (__net) is only reserved in BUILD_NETMSG (because of the { } block in it). This patch marks the buffer as static to avoid this problem. Based on a patch from Samuel Gauthier Signed-off-by: Pablo Neira Ayuso

conntrackd: add support state-replication based on TCP

2009-08-23T10:11:20+00:00

This patch adds support for TCP as protocol to replicate state-changes between two daemons. Note that this only makes sense with the notrack mode. Signed-off-by: Pablo Neira Ayuso

conntrackd: allow to remove file descriptors from set

2009-08-21T14:06:11+00:00

With this patch, we can remove file descriptors dinamically from our own file descriptor pool. Signed-off-by: Pablo Neira Ayuso

conntrackd: reduce the number of gettimeofday() syscalls

2009-08-21T14:06:08+00:00

This patch reduces the number of gettimeofday syscalls by caching the current time in a variable at the beginning of the main loop. Based on a suggestion from Vincent Jardin. Signed-off-by: Pablo Neira Ayuso

conntrackd: add `DisableExternalCache' clause

2009-08-19T14:59:38+00:00

This patch adds the clause `DisableExternalCache' that allows you to disable the external cache and to directly inject the entries into the kernel conntrack table. As a result, the CPU consumption of conntrackd increases. This clause can only be used with the FT-FW and the notrack synchronization modes, but not with the alarm mode. Signed-off-by: Pablo Neira Ayuso