| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2008-08-02 | script: rework scripts that enable interaction with keepalived | Pablo Neira Ayuso | |
| This patch reworks the documentation section. It removes the replicated keepalived.conf files and merge all the scripts into one to reduce confusion and improve maintainability. It's likely that the documentation directory will suffer more restructurations in the near future. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-08-01 | doc: remove duplicated example files | Pablo Neira Ayuso | |
| This patch removes the directories node1/ and node2/ since the differences are few small and the user should be able to get it running if he RTFM. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-08-01 | ftfw: show consistent information to users for problem diagnosing | Pablo Neira Ayuso | |
| This patch hides information that may confuse users while they are diagnosing problems in their setup. For example, we hide entries that are schedule to expire - from the user side, they are already destroyed entries; and we show in the counters the real active entries, not all that are stored in the caches. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-08-01 | fix broken normal deletion in caches | Pablo Neira Ayuso | |
| This patch fixes the non-timer-based cache deletion. This bug affects the alarm-based approach since the backup replicas did not get the deletion event, thus, delaying the deletion. This patch introduces cache_find() to look up for a conntrack object and __cache_del_timer() to perform direct deletions by means of the pointer obtained with cache_find(). Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-08-01 | fix: wrong use of timersub in cache_timer | Pablo Neira Ayuso | |
| Fix wrong output in the dump of the expire timer which was negative. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-08-01 | fix: wrong information related to default logging action | Pablo Neira Ayuso | |
| Logging is set off by default instead of what the example files state. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-08-01 | cleanup: remove obsolete clause Replicate in the example conffiles | Pablo Neira Ayuso | |
| Remove obsolete clause Replicate in the example configuration files. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-08-01 | fix: use %zu instead of %u for size_t | Pablo Neira Ayuso | |
| Use %zu instead of %u for size_t to remove compilation warning. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-08-01 | commit: retry at least once if we hit ETIME or ENOMEM | Eric Leblond | |
| Some users are reporting ETIME errors in the update. This happens when you try to update a conntrack that is expiring. To avoid this problem, we retry once at least. We do similar for ENOMEM errors, although only users in virtual machines have reported this AFAIK. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-08-01 | add more sanity checks in the input path | Pablo Neira Ayuso | |
| Some users have reported crashes when nf_conntrack_ipv6 was not present. This patch performs more robust sanity checks in the input path. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-07-29 | CLI: add new option --buffer-size for -E | Pablo Neira Ayuso | |
| Add new option --buffer-size for -E to set the netlink socket buffer size. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-07-29 | filter: skip protocol state filtering if state not present | Pablo Neira Ayuso | |
| Skip user-space the protocol state filter if the protocol state is not present in the event message. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-07-24 | log: syslog displays the entry that triggers the error | Pablo Neira Ayuso | |
| This patch fixes an inconsistency in the output. If syslog was chosen as logger, the conntrack entries that triggered an error were not displayed. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-07-23 | add support for kernel-space filtering via BSF | Pablo Neira Ayuso | |
| This patch adds support for kernel-space filtering via BSF by means of the libnetfilter_conntrack's BSF high-level API. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-07-22 | Major rework of the user-space event filtering | Pablo Neira Ayuso | |
| This patch reworks the user-space filtering. Although we have kernel-space filtering since Linux kernel >= 2.6.26, we keep userspace filtering to ensure backward compatibility. Moreover, this patch prepares the implementation of the kernel-space filtering via libnetfilter_conntrack's high-level berkeley socket filter API. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2008-06-22 | fix xml output: wrap output with one root element | Pablo Neira Ayuso | |
| 2008-06-16 | use only the original tuple to check if a conntrack is present | Pablo Neira Ayuso | |
| 2008-06-15 | do not include Changelog in tarballs, user git shortlog for changelog instead | Pablo Neira Ayuso | |
| 2008-06-15 | fix unsecure usage of printf and include limits.h (PATH_MAX and INT_MAX) | Albin Tonerre | |
| 2008-06-15 | check if entries already exist in kernel before injection | Pablo Neira Ayuso | |
| 2008-05-31 | delay the closure of the dump descriptor to fix assertion with cache_wtconntrack-tools-0.9.7 | Pablo Neira Ayuso | |
| 2008-05-31 | increase deletion stats when the timer is scheduled in cache_del_timeout() | Pablo Neira Ayuso | |
| 2008-05-27 | define SO_[RCV|SND]BUFFORCE if not set | Pablo Neira Ayuso | |
| 2008-05-27 | fix make distcheck | Pablo Neira Ayuso | |
| 2008-05-27 | remove secmark support for conntrackd | Pablo Neira Ayuso | |
| 2008-05-26 | fix leak in cache_destroy(): release objects before destroying the cache | Pablo Neira Ayuso | |
| 2008-05-26 | rework the HELLO logic inside FT-FW | Pablo Neira Ayuso | |
| 2008-05-25 | add best effort replication protocol (aka NOTRACK) | Pablo Neira Ayuso | |
| 2008-05-25 | add eventfd emulation to communicate receiver -> sender | Pablo Neira Ayuso | |
| 2008-05-22 | add flex version warning (better with >= 2.5.33) | Pablo Neira Ayuso | |
| 2008-05-22 | only allow the use of --secmark for listing (filtering) | Pablo Neira Ayuso | |
| add missing string.h required by strdup in config parsing | |||
| 2008-05-21 | check for missing IPv6 address before hashing | Pablo Neira Ayuso | |
| 2008-05-20 | Updates (-U) show the effect of the operation in the conntrack entry | Pablo Neira Ayuso | |
| 2008-05-20 | add Mcast[Snd|Rcv]SocketBuffer clauses to tune multicast socket buffers | Pablo Neira Ayuso | |
| 2008-05-18 | improve network message sanity checkings | Pablo Neira Ayuso | |
| 2008-05-16 | - remove (misleading) counters and use information from the statistics mode | Pablo Neira Ayuso | |
| - use generic nfct_copy() from libnetfilter_conntrack to update objects - use generic nfct_cmp() to compare objects | |||
| 2008-05-14 | minor fix of the manpage (Max Wilhelm) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| 2008-04-29 | Fix reorder possible reordering of destroy messages under message omission. ↵ | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| This patch introduces the TimeoutDestroy clause to determine how long a conntrack remains in the internal cache once it has been destroy from the kernel table. | |||
| 2008-04-26 | rework of the FT-FW approach | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| 2008-04-16 | add more verbose error notification when the injection of a conntrack fails | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| 2008-04-16 | minor update of the manpages | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| 2008-04-16 | o fix NAT filtering via --src-nat and --dst-nat (reported by K.Oledzki) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| o recover the ID support o show display counters to stderr o enable filtering by status and ID | |||
| 2008-04-13 | fix conntrack -U -p tcp [...] | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| 2008-04-13 | relax parameter checking for UDP and TCP | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| 2008-04-13 | check for pkg-config before anything (fix bogus missing libraries failure) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| 2008-04-13 | add initial automated qa testing for the conntrack cli | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| 2008-04-13 | This is a major improvement of the conntrack command line tool: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| o check for missing source/address IP/ports in creation and get operations o way more flexible conntrack updates and deletions o fix NAT filtering via --src-nat and --dst-nat (reported by K.Oledzki) o show display counters to stderr o minor cleanups | |||
| 2008-04-12 | o simplify parameter-handling code | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| o check for missing source/address IP/ports o minor cleanups | |||
| 2008-04-09 | update manpages with the new URL | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
| 2008-04-09 | improve netlink overrun handling | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
 |
index : conntrack-tools.git | |
| conntrack-tools i.e. conntrack and conntrackd (mirror of https://github.com/vyos/conntrack-tools.git) |
| summaryrefslogtreecommitdiff |