conntrack-tools i.e. conntrack and conntrackd (mirror of https://github.com/vyos/conntrack-tools.git) https://git.amelek.net/vyos/conntrack-tools.git/atom?h=vyatta%2FVC6.4-2012.05.31%2Fi386 2012-01-23T19:43:15+00:00 2012-01-23T19:43:15+00:00 Gaurav Sinha gaurav.sinha@vyatta.com 2012-01-23T19:43:15+00:00 urn:sha1:c482ddb3278aee162250d53ccb3b2bd2c5987b2d 2012-01-23T19:39:51+00:00 Gaurav Sinha gaurav.sinha@vyatta.com 2012-01-23T19:39:51+00:00 urn:sha1:66da74b336fe66472f9b5d16f730e0261c5ef4af Generated files got committed by git commit -a, thus reverting the commit. This reverts commit d8def099fed622b42f7b66468981d6d5c7aac74c. 2012-01-23T19:35:35+00:00 Gaurav Sinha gaurav.sinha@vyatta.com 2012-01-23T19:35:35+00:00 urn:sha1:d8def099fed622b42f7b66468981d6d5c7aac74c 2012-01-23T19:24:40+00:00 Gaurav Sinha gaurav.sinha@vyatta.com 2012-01-23T19:24:40+00:00 urn:sha1:7bba65dc63e5544c61a7b78813df8e18647e4579 2012-01-23T00:27:29+00:00 Pablo Neira Ayuso pablo@netfilter.org 2012-01-23T00:23:41+00:00 urn:sha1:1e70249a665aa611b3547233952f8f9bb51369f8 % conntrack -U -u FIXED_TIMEOUT conntrack v1.0.1 (conntrack-tools): Operation failed: Device or resource busy With this patch, you can make indeed make it: % conntrack -U -u FIXED_TIMEOUT [...] conntrack v1.0.1 (conntrack-tools): 8 flow entries have been updated. This patch also adds the corresponding simple QA tests. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-01-22T21:02:56+00:00 Pablo Neira Ayuso pablo@netfilter.org 2012-01-22T21:00:54+00:00 urn:sha1:451dafe6f5e1add75793597ba9bd0e3fddf2d7f9 This patch allows you to dump the internal and external expectation cache in XML. % conntrackd -i exp -x <flow><layer3 protonum="2" protoname="ipv4"><expected><src>192.168.1.135</src><dst>130.89.148.12</dst></expected><mask><src>255.255.255.255</src><dst>255.255.255.255</dst></mask><master><src>192.168.1.135</src><dst>130.89.148.12</dst></master></layer3><layer4 protonum="6" protoname="tcp"><expected><sport>0</sport><dport>9082</dport></expected><mask><sport>0</sport><dport>65535</dport></mask><master><sport>50518</sport><dport>21</dport></master></layer4><meta><helper-name>ftp</helper-name></meta></flow> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-01-22T20:24:22+00:00 Pablo Neira Ayuso pablo@netfilter.org 2012-01-22T20:21:02+00:00 urn:sha1:b5ca4272d185171971872a9a2ee677cd66c8386b Now you can dump expectations in XML format and display the timestamp. conntrack -L exp -o xml,timestamp <?xml version="1.0" encoding="utf-8"?> <expect> <flow><layer3 protonum="2" protoname="ipv4"><expected><src>192.168.1.135</src><dst>130.89.148.12</dst></expected><mask><src>255.255.255.255</src><dst>255.255.255.255</dst></mask><master><src>192.168.1.135</src><dst>130.89.148.12</dst></master></layer3><layer4 protonum="6" protoname="tcp"><expected><sport>0</sport><dport>32877</dport></expected><mask><sport>0</sport><dport>65535</dport></mask><master><sport>49881</sport><dport>21</dport></master></layer4><meta><helper-name>ftp</helper-name><timeout>294</timeout><when><hour>21</hour><min>22</min><sec>09</sec><wday>1</wday><day>22</day><month>1</month><year>2012</year></when></meta></flow> </expect> You have to upgrade libnetfilter_conntrack to access this feature. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-01-22T17:27:43+00:00 Pablo Neira Ayuso pablo@netfilter.org 2012-01-22T17:27:43+00:00 urn:sha1:4cd4e306286b4b255b7a5fb310a5250bb9d099e0 If ExpectationSync On is used, we synchronize no expectations at all due to a problem in the event filtering. This is bug, this patch fixes the problem. Reported-by: Gaurav Sinha <gaurav.sinha@vyatta.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 2012-01-18T20:05:50+00:00 Gaurav Sinha gaurav.sinha@vyatta.com 2012-01-18T20:05:50+00:00 urn:sha1:e72ca98329a25414108e2af350c4014de9e8f736 2012-01-12T22:45:24+00:00 Gaurav Sinha gaurav.sinha@vyatta.com 2012-01-12T22:45:24+00:00 urn:sha1:ca37a710d526d17490ebdc3af760bfddd316426d