<feed xmlns='http://www.w3.org/2005/Atom'>
<title>conntrack-tools.git/include, branch conntrack-tools-1.0.1</title>
<subtitle>conntrack-tools i.e. conntrack and conntrackd (mirror of https://github.com/vyos/conntrack-tools.git)
</subtitle>
<id>https://git.amelek.net/vyos/conntrack-tools.git/atom?h=conntrack-tools-1.0.1</id>
<link rel='self' href='https://git.amelek.net/vyos/conntrack-tools.git/atom?h=conntrack-tools-1.0.1'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/conntrack-tools.git/'/>
<updated>2011-02-15T00:51:11+00:00</updated>
<entry>
<title>cache: log if we received a commit request while already one in progress</title>
<updated>2011-02-15T00:51:11+00:00</updated>
<author>
<name>Pablo Neira Ayuso</name>
<email>pablo@netfilter.org</email>
</author>
<published>2011-02-15T00:51:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/conntrack-tools.git/commit/?id=c2acb11453fc75519862240298e106ac79274780'/>
<id>urn:sha1:c2acb11453fc75519862240298e106ac79274780</id>
<content type='text'>
This patch improves the case in which we receive a commit request
but we are already performing one. This behaviour is suspicious
since the HA manager should not trigger a double master transition.
Otherwise, something probably is not configured appropriately.

This improves 98756c2608f0879a2322919c7441973216565272
"cache: close commit request if we already have one in progress".

Signed-off-by: Pablo Neira Ayuso &lt;pablo@netfilter.org&gt;
</content>
</entry>
<entry>
<title>conntrack: add zone support</title>
<updated>2010-07-05T15:58:45+00:00</updated>
<author>
<name>Pablo Neira Ayuso</name>
<email>pablo@netfilter.org</email>
</author>
<published>2010-07-05T15:58:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/conntrack-tools.git/commit/?id=3562ca2e16cac2af2ac6f344ba462b40a05d370f'/>
<id>urn:sha1:3562ca2e16cac2af2ac6f344ba462b40a05d370f</id>
<content type='text'>
This patch adds `--zone' to the command line tool. This adds
the missing user-space support for Patrick's McHardy iptables
CT target.

Signed-off-by: Pablo Neira Ayuso &lt;pablo@netfilter.org&gt;
</content>
</entry>
<entry>
<title>conntrack: add `--any-nat' to filter any NATted flow</title>
<updated>2010-07-01T10:49:19+00:00</updated>
<author>
<name>Pablo Neira Ayuso</name>
<email>pablo@netfilter.org</email>
</author>
<published>2010-06-22T09:52:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/conntrack-tools.git/commit/?id=ad33006a162fc6202de096a8f6d65a7c841da1ce'/>
<id>urn:sha1:ad33006a162fc6202de096a8f6d65a7c841da1ce</id>
<content type='text'>
This patch adds the --any-nat option that allows to display src-NATted
OR dst-NATted flows.

Signed-off-by: Pablo Neira Ayuso &lt;pablo@netfilter.org&gt;
</content>
</entry>
<entry>
<title>conntrack: put all the commands and options code together</title>
<updated>2010-06-22T09:44:51+00:00</updated>
<author>
<name>Pablo Neira Ayuso</name>
<email>pablo@netfilter.org</email>
</author>
<published>2010-02-28T17:12:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/conntrack-tools.git/commit/?id=0ca9676dd9e9bdd9382954d42e39c8bdd212f966'/>
<id>urn:sha1:0ca9676dd9e9bdd9382954d42e39c8bdd212f966</id>
<content type='text'>
This patch is a cleanup, it puts all the commands and options code
together. This makes easier and less error-prone the task to add
new commands and options.

Signed-off-by: Pablo Neira Ayuso &lt;pablo@netfilter.org&gt;
</content>
</entry>
<entry>
<title>conntrackd: fix `conntrackd -c' if external cache is disabled</title>
<updated>2010-02-16T23:39:44+00:00</updated>
<author>
<name>Pablo Neira Ayuso</name>
<email>pablo@netfilter.org</email>
</author>
<published>2010-02-16T23:39:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/conntrack-tools.git/commit/?id=13c612efc51cf5f8d58423c59323df13739315d6'/>
<id>urn:sha1:13c612efc51cf5f8d58423c59323df13739315d6</id>
<content type='text'>
This patch fixes a hung that occurs if you invoke `conntrackd -c'
and you have disabled the external cache.

Note that `conntrackd -c' does nothing since there is no entries
in the external cache to be committed.

Signed-off-by: Pablo Neira Ayuso &lt;pablo@netfilter.org&gt;
</content>
</entry>
<entry>
<title>conntrackd: add support for TCP window scale factor synchronization</title>
<updated>2010-02-11T11:06:37+00:00</updated>
<author>
<name>Pablo Neira Ayuso</name>
<email>pablo@netfilter.org</email>
</author>
<published>2009-12-29T19:02:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/conntrack-tools.git/commit/?id=56817d1c0cc30bcd65c56c2f73634b256603cc4d'/>
<id>urn:sha1:56817d1c0cc30bcd65c56c2f73634b256603cc4d</id>
<content type='text'>
This patch adds a new option TCPWindowTracking that allows not
to disable TCP window tracking as it occurs by default.

Signed-off-by: Pablo Neira Ayuso &lt;pablo@netfilter.org&gt;
</content>
</entry>
<entry>
<title>conntrackd: add ICMP support for state-synchronization</title>
<updated>2009-12-19T14:24:20+00:00</updated>
<author>
<name>Pablo Neira Ayuso</name>
<email>pablo@netfilter.org</email>
</author>
<published>2009-10-06T09:19:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/conntrack-tools.git/commit/?id=65645763ebe870fa01b5c1a5dbe810feb9397ff2'/>
<id>urn:sha1:65645763ebe870fa01b5c1a5dbe810feb9397ff2</id>
<content type='text'>
This patch adds state-synchronization for ICMP. You SHOULD use a
Linux kernel &gt;= 2.6.31, otherwise this patch can result in tons
of state-updates.

Signed-off-by: Pablo Neira Ayuso &lt;pablo@netfilter.org&gt;
</content>
</entry>
<entry>
<title>conntrackd: add `DisableInternalCache' clause</title>
<updated>2009-10-20T23:43:07+00:00</updated>
<author>
<name>Pablo Neira Ayuso</name>
<email>pablo@netfilter.org</email>
</author>
<published>2009-10-20T23:43:07+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/conntrack-tools.git/commit/?id=8ad5df6121c46753a6d12fafa5ab9da309ddb721'/>
<id>urn:sha1:8ad5df6121c46753a6d12fafa5ab9da309ddb721</id>
<content type='text'>
This patch adds the clause `DisableInternalCache' that allows you
to bypass the internal cache. This clause can only be used with
the notrack synchronization mode.

Signed-off-by: Pablo Neira Ayuso &lt;pablo@netfilter.org&gt;
</content>
</entry>
<entry>
<title>conntrackd: add retention queue for TCP errors</title>
<updated>2009-09-23T16:12:37+00:00</updated>
<author>
<name>Pablo Neira Ayuso</name>
<email>pablo@netfilter.org</email>
</author>
<published>2009-09-23T16:12:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/conntrack-tools.git/commit/?id=6360f319362fd13c86c3387a4bac57665d5ecd73'/>
<id>urn:sha1:6360f319362fd13c86c3387a4bac57665d5ecd73</id>
<content type='text'>
Under stress, the TCP stack may return EAGAIN if there is not
space left in the sender buffer. We also enqueue any other
error.

Signed-off-by: Pablo Neira Ayuso &lt;pablo@netfilter.org&gt;
</content>
</entry>
<entry>
<title>conntrackd: fix re-connect with multiple TCP channels</title>
<updated>2009-09-23T13:18:30+00:00</updated>
<author>
<name>Pablo Neira Ayuso</name>
<email>pablo@netfilter.org</email>
</author>
<published>2009-09-23T13:18:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/conntrack-tools.git/commit/?id=da1160ad2c6e05c9e5594e17e5e35cbb461871e4'/>
<id>urn:sha1:da1160ad2c6e05c9e5594e17e5e35cbb461871e4</id>
<content type='text'>
This patch fixes a bug in the TCP support that breaks
re-connections of the client side if several TCP
channels are used in the configuration file.

Signed-off-by: Pablo Neira Ayuso &lt;pablo@netfilter.org&gt;
</content>
</entry>
</feed>
