conntrack-tools.git/src, branch conntrack-tools-0.9.14

conntrackd: fix flow-state filtering for TCP

2009-12-23T18:40:49+00:00

This patch fixes the clause `State' in `Filter' that allows you to filter by protocol state. This bug was introduced during the implementation of the TCP-based synchronization. Signed-off-by: Pablo Neira Ayuso

conntrackd: add ICMP support for state-synchronization

2009-12-19T14:24:20+00:00

This patch adds state-synchronization for ICMP. You SHOULD use a Linux kernel >= 2.6.31, otherwise this patch can result in tons of state-updates. Signed-off-by: Pablo Neira Ayuso

conntrackd: use indirect call to build layer 4 protocol information

2009-12-19T12:55:00+00:00

With this patch, we use an indirect call to build the layer 4 information into the synchronization message. Signed-off-by: Pablo Neira Ayuso

conntrackd: add `DisableInternalCache' clause

2009-10-20T23:43:07+00:00

This patch adds the clause `DisableInternalCache' that allows you to bypass the internal cache. This clause can only be used with the notrack synchronization mode. Signed-off-by: Pablo Neira Ayuso

conntrackd: add missing external statistics

2009-10-14T14:14:12+00:00

In 0b03f4b759e439edd2c3da0add08050276d7dc5f, I forgot to increase the stats for successful cases. This patch fixes this. Signed-off-by: Pablo Neira Ayuso

conntrackd: add statistics when the external cache is disabled

2009-10-14T13:58:18+00:00

# conntrackd -s external inject: connections created: 0 failed: 0 connections updated: 0 failed: 0 connections destroyed: 0 failed: 0 Signed-off-by: Pablo Neira Ayuso

conntrack: use fscanf() instead of read() for showing counter

2009-10-08T16:06:04+00:00

Read an integer right away with fscanf() instead of read()-ing to a buffer, which was actually to small for the terminating '\0', and atoi()-ing. Furthermore read() might not read enough, though unlikely here. Signed-off-by: Hannes Eder Signed-off-by: Pablo Neira Ayuso

conntrack: avoid error with expectations when using 'conntrack -E -e ALL ...'

2009-10-08T16:04:11+00:00

Avoid this error: conntrack v0.9.13 (conntrack-tools): Operation failed: No such file or directory when using 'conntrack -E -e ALL ...'. This is caused by the fact that netfilter expectations also get delivered, but things are not setup for this, nfnl_catch returns -1 and errno = ENOENT. Signed-off-by: Hannes Eder Signed-off-by: Pablo Neira Ayuso

conntrack: fix output when no arguments are passed

2009-10-07T13:08:35+00:00

When 'conntrack' is called with no arguments then garbage is printed after the usage message. This patch fixes this. Signed-off-by: Hannes Eder Signed-off-by: Pablo Neira Ayuso

conntrackd: fix wrong calculation of new maxfd on unregister_fds()

2009-09-25T22:19:45+00:00

This patch fixes a missing calculation of maxfd when a file descriptor is unregistered. Reported-by: Jean Mickael Guerin Signed-off-by: Pablo Neira Ayuso