Age | Commit message (Collapse) | Author | |
---|---|---|---|
2008-05-31 | delay the closure of the dump descriptor to fix assertion with cache_wtconntrack-tools-0.9.7 | Pablo Neira Ayuso | |
2008-05-26 | fix leak in cache_destroy(): release objects before destroying the cache | Pablo Neira Ayuso | |
2008-05-26 | rework the HELLO logic inside FT-FW | Pablo Neira Ayuso | |
2008-05-25 | add best effort replication protocol (aka NOTRACK) | Pablo Neira Ayuso | |
2008-05-25 | add eventfd emulation to communicate receiver -> sender | Pablo Neira Ayuso | |
2008-05-22 | add flex version warning (better with >= 2.5.33) | Pablo Neira Ayuso | |
2008-05-22 | only allow the use of --secmark for listing (filtering) | Pablo Neira Ayuso | |
add missing string.h required by strdup in config parsing | |||
2008-05-20 | add Mcast[Snd|Rcv]SocketBuffer clauses to tune multicast socket buffers | Pablo Neira Ayuso | |
2008-05-18 | improve network message sanity checkings | Pablo Neira Ayuso | |
2008-05-16 | - remove (misleading) counters and use information from the statistics mode | Pablo Neira Ayuso | |
- use generic nfct_copy() from libnetfilter_conntrack to update objects - use generic nfct_cmp() to compare objects | |||
2008-05-14 | minor fix of the manpage (Max Wilhelm) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
2008-04-26 | rework of the FT-FW approach | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
2008-04-16 | add more verbose error notification when the injection of a conntrack fails | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
2008-04-16 | o fix NAT filtering via --src-nat and --dst-nat (reported by K.Oledzki) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
o recover the ID support o show display counters to stderr o enable filtering by status and ID | |||
2008-04-13 | check for pkg-config before anything (fix bogus missing libraries failure) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
2008-04-13 | This is a major improvement of the conntrack command line tool: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
o check for missing source/address IP/ports in creation and get operations o way more flexible conntrack updates and deletions o fix NAT filtering via --src-nat and --dst-nat (reported by K.Oledzki) o show display counters to stderr o minor cleanups | |||
2008-04-12 | o simplify parameter-handling code | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
o check for missing source/address IP/ports o minor cleanups | |||
2008-04-09 | update manpages with the new URL | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
2008-04-09 | improve netlink overrun handling | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
2008-04-08 | fix asymmetric path support (still some open concerns) | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
2008-03-26 | fix minor compilation issue in amd64 with gcc4.3 (reported by Daniel Schepler | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
via M.Kellermann) | |||
2008-03-25 | Krzysztof Oledzki <ole@ans.pl>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
o add ICMPv6 (-p icmpv6) support o add possibility to distinguish between invalid (unknown) and empty proto | |||
2008-03-25 | Pablo Neira Ayuso <pablo@netfilter.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
o remove .svn directory from make distcheck tarballs (reported by B.Benjamini) + Krzysztof Oledzki <ole@ans.pl>: o fix minor compilation warning | |||
2008-03-08 | update changelog with 0.9.6 release datesvn_t_conntrack-tools-0.9.6 | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
2008-02-22 | cleanup: remove config_set from main(), use config_file variable instead | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
2008-02-19 | compose the file descriptor set at initialization stage to save some cycles | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
2008-02-14 | From: Max Kellermann <max@duempel.org> | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
whitespace cleanups | |||
2008-02-14 | From: Max Kellermann <max@duempel.org> | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
use "for" loop instead of "while" | |||
2008-02-14 | From: Max Kellermann <max@duempel.org> | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
eliminate duplicated initialization | |||
2008-02-09 | o add IPv6 information to synchronization messages | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
o add support for NAT sequence adjustment (requires Linux kernel >= 2.6.25) o remove TODO file from release tarballs | |||
2008-02-02 | add IPv6 support to conntrackd | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
2008-01-29 | implement a rb-tree based alarm framework | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
2008-01-23 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
use size_t | |||
2008-01-23 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
introduce alarm_pending() | |||
2008-01-23 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
check if the received packet is large enough Minor changes by the committer | |||
2008-01-23 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
remove unused prototype in network.h | |||
2008-01-23 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
added struct local_server, several cleanups in local socket infrastructure This patch include minor changes by the comitter | |||
2008-01-23 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
fix error checking of local_create_server() | |||
2008-01-20 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
remove init_alarm() before add_alarm() | |||
2008-01-20 | Based on patch from Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
merge mod_alarm() into add_alarm(), remove alarm_set_expiration() | |||
2008-01-18 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
improve error message if netlink initialization fails | |||
2008-01-18 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
Simplify logging infrastructure | |||
2008-01-18 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
Use fputs() instead of fprintf() | |||
2008-01-18 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
there is no need to check capabilities - the socket() call will fail a few lines later anyway, producing an error message which is good enough. | |||
2008-01-17 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
eliminate unsed cache_get_conntrack() in rs_list_to_tx() | |||
2008-01-17 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
explicitly cast in nat_parse() | |||
2008-01-17 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
fix double free() bug in the error output path of mcast_create() | |||
2008-01-17 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
eliminate local variable by returning from the loop | |||
2008-01-17 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
remove superfluous initialization | |||
2008-01-17 | Max Kellermann <max@duempel.org>: | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | |
import only required C headers and put local headers on top to check |