The compiler is probably smart enough to see that the type cannot
change, but make an "else" out...

"-ldl" is not needed since the programs themselves never use functions
from libdl. Also, -dynami...

Also bump LIBVERSION.

Signed-off-by: Pablo Neira Ayuso <[email protected]>

This will work as it does in conntrack; it won't pass NLM_F_ACK into
ctnetlink_new_expect in the...

This adds the ATTR_HELPER_INFO that can be used to send binary data
that will be attached to the...

This patch adds the following examples:

nfexp-mnl-dump
nfexp-mnl-event

Basically, we re-use th...

This patch adds support to build and to parse netlink messages
from/to one user-space nf_conntra...

This patch adds the following examples:

nfct-mnl-create
nfct-mnl-del
nfct-mnl-dump
nfct-mnl-eve...

This patch adds support to build and to parse netlink messages
from/to one user-space nf_conntra...

Signed-off-by: Pablo Neira Ayuso <[email protected]>

The previous patch was incomplete. This fixes several issues with
it like the IPV4 and IPV6 addr...

This allows you to set and to get the address for both IPv4 and IPV6
using the same interface. T...

For ICMP flows:

conntrack -U -s 192.168.1.114 -m 1

returned -EINVAL. It seems we were includi...

This patch improves several aspects of the QA tools to stress
the conntrack system via ctnetlink...

ct_stress adds plenty of flows in assured state (worst case
for the conntrack table).

ct_events...

This patch adds the infrastructure to allow filtered dumping.

See utils/conntrack_dump_filter.c...

Before:

proto=17 src=192.168.11.4 dst=192.168.10.4 sport=0 dport=5060 mask-src=255.255.255.255 ...

Signed-off-by: Pablo Neira Ayuso <[email protected]>

Make sure this attribute is a NULL-terminated string, otherwise
we hit EINVAL if we set this att...

This patch allows you to set expectfn.

Signed-off-by: Pablo Neira Ayuso <[email protected]>

This patch adds ATTR_EXP_NAT_TUPLE and ATTR_EXP_NAT_DIR attributes.

Signed-off-by: Pablo Neira ...

This patch allows you to specify the expectation class.

Signed-off-by: Pablo Neira Ayuso <pablo...

Example of the XML output:

<flow type="new">
<layer3 protonum="2" protoname="IPv4">
...

This patch bumps version to 1.0.0 and it bumps the API revision number.

Signed-off-by: Pablo Ne...

This patch adds nfexp_cmp that allows you to compare two expectation
objects.

This includes the...

Signed-off-by: Pablo Neira Ayuso <[email protected]>

They seem to be accidentally swapped. Fix this.

Spotted by qa/test_api.

Signed-off-by: Pablo N...

Signed-off-by: Pablo Neira Ayuso <[email protected]>

Now, struct nf_expect takes only 192 bytes, instead of 1KB.
struct nf_conntrack takes 296 bytes ...

This patch removes the reference to the licensing terms of the
library in the header files.

Thi...

We have to use sizeof(struct nf_ct_tcp_flags) instead of
sizeof(u_int16_t) to avoid problems in ...

This patch is *not* changing the licensing terms of this library (which
was initially released u...

expect_get now allows you get the expectation that has been
created with expect_create.

Signed-...

NFCT_HELPER_NAME_MAX is 16, which is the maximum helper name
allowed since 2.6.29.

Signed-off-b...

Now, the output of nfexp_snprintf looks like this:

299 proto=6 src=192.168.1.130 dst=130.89.148...

This patch adds support for CTA_EXPECT_HELP_NAME.

We now have the ATTR_EXP_HELPER_NAME attribut...

Only ignore these paths if they are a directory.

It is like nfct_send() but for expectations, for API symmetry.

Signed-off-by: Pablo Neira Ayuso...

This patch adds mask and master tuple information regarding one
expectation. This information ha...

Otherwise, we don't print it.

Signed-off-by: Pablo Neira Ayuso <[email protected]>

The master tuple was not parsed. This patch also fixes an incorrect
use of the exp->set field fo...

This closes netfilter bugzilla #754:
http://bugzilla.netfilter.org/show_bug.cgi?id=754

Reported...

static analysis (analysis based only on compiling of sources, not based
on running of binary) of...

This patch adds nfct_destroy() to all the examples in the utils folder.
Although this may be obv...

I guess that Jan Engelhardt is going to like this? :-)

Signed-off-by: Pablo Neira Ayuso <pablo@...

This patch bumps version to 0.9.1 and it bumps the API revision number.

Signed-off-by: Pablo Ne...

> CC parse.lo
> parse.c: In function ‘__parse_conntrack’:
> parse.c:434:15: warning: array...

This patch deprecates the low level API. This API is not currently
used by any known clients (at...

These functions are evil since they allow the use of memcpy() instead
of nfct_copy(). This is a ...

Thus, we have a fast version of nfct_copy() which allows to
copy the destination to the origin. ...

This problem was caught by qa/test_api.

Signed-off-by: Pablo Neira Ayuso <[email protected]>

This patch adds the connection tracking extension that allows
conntrack timestamping.

This requ...

Signed-off-by: Pablo Neira Ayuso <[email protected]>

This patch fixes an embarasing a use-after-free in nfct_destroy()
that was introduced by myself ...

This patch adds support for the new attribute CTA_SECCTX that
supersedes CTA_SECMARK.

Signed-of...

-Wall flags this:

make test_api test_filter
make[1]: Entering directory `/home/jengelh/code/li...

The addition of -Wall flagged some legitimate warnings:

make expect_dump expect_create expect_...

Signed-off-by: Jan Engelhardt <[email protected]>

Signed-off-by: Jan Engelhardt <[email protected]>

This fixes a minor problem introduced in b245e4092c5a7f09729e64868a42e13f48a

Signed-off-by: Pab...

This patch uses CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ instead which is the
name that is used in the L...

Signed-off-by: Jan Engelhardt <[email protected]>

Signed-off-by: Jan Engelhardt <[email protected]>

Signed-off-by: Jan Engelhardt <[email protected]>

This patch exports several low-level function that allow to build
and parse netlink messages tha...

With this patch, the expect_events example also listens to other
sort of expectation events that...

This patch re-works the callback handling to allow the use the same socket
to send/receive comma...

This patch updates the README file and it includes the re-licensing
of this library to make it G...

Signed-off-by: Jan Engelhardt <[email protected]>

Signed-off-by: Jan Engelhardt <[email protected]>

Signed-off-by: Jan Engelhardt <[email protected]>