conntrack-tools.git/src, branch lithium

Merge tag 'conntrack-tools-1.4.3' into lithium

2015-11-26T22:10:55+00:00

conntrack-tools 1.4.3 release

Merge tag 'conntrack-tools-1.4.2' into lithium

2015-11-25T18:50:37+00:00

conntrack-tools 1.4.2 release

Merge tag 'conntrack-tools-1.4.1' into lithium

2015-11-24T22:11:13+00:00

conntrack-tools 1.4.1 release

Merge tag 'conntrack-tools-1.4.0' into lithium

2015-11-21T14:44:29+00:00

conntrack-tools 1.4.0 release

conntrackd: build: fix crash when optional kernel modules are not loaded

2015-10-02T06:51:29+00:00

Fix a possible crash if conntrackd sees DCCP, SCTP and ICMPv6 traffic and the corresponding kernel modules that track this traffic are not available. Fixes: http://bugzilla.netfilter.org/show_bug.cgi?id=910 Signed-off-by: Pablo Neira Ayuso

nfct: Update syntax to specify command before subsystem

2015-08-26T18:43:55+00:00

This patch gets the nfct syntax in sync with nft so it looks like this: nfct object ... instead of: nfct object ... This patch retains backward compatibility so you can still use the old syntax. The manpage and tests have been also updated to promote the adoption of this syntax. We should have little existing clients of this tool as we can only use this to configure the cttimeout and cthelper infrastructures. Signed-off-by: Pablo Neira Ayuso

nfct: don't link against libnetfilter_conntrack

2015-08-26T18:43:55+00:00

The nfct program uses none of the symbols of libnetfilter_conntrack. Linking against it means that distributors have to maintain an useless depedency. This was spotted by the dpkg-shlibdeps tool. Signed-off-by: Arturo Borrero Gonzalez Signed-off-by: Pablo Neira Ayuso

conntrackd: missing break in expectation message parser function

2015-08-18T17:22:07+00:00

Fortunately, the TLVs come in order in the message, however, if the order is changed we'll incorrectly set up the expectation. Signed-off-by: Pablo Neira Ayuso

conntrackd: use strncpy to set up the cache name

2015-08-18T17:22:07+00:00

This is not exposed, but use the strncpy() variant to calm down static code validators. Signed-off-by: Pablo Neira Ayuso

conntrackd: simplify branch in tcp_accept()

2015-08-18T17:22:07+00:00

The same code is executed regardless the reason why accept() has failed. Signed-off-by: Pablo Neira Ayuso