PKG_CHECK_MODULES already produces its own (and more verbose) messsage
when a module cannot be f...

Signed-off-by: Jan Engelhardt <[email protected]>

libtool automatically adds PIC flags as needed.

Signed-off-by: Jan Engelhardt <[email protected]>

Signed-off-by: Jan Engelhardt <[email protected]>

sh -e (-x) will provide the same functionality as the run function
previously.

Signed-off-by: J...

Similar to the commit in iptables, add Libs.private to tell about
dependencies for static linkin...

This patch adds some missing attribute checkings in the XML
output that may result in inconsiste...

This patch adds missing tags such as [UPDATE] and [DESTROY]
for expectation events. The Linux ke...

This patch adds an example on how to set up a user-space expectation.

Signed-off-by: Pablo Neir...

This patch changes the existing example to make it more realistic.
It also removes the timeout s...

This patch allows to set the expectation flags from user-space.

Signed-off-by: Pablo Neira Ayus...

We also remove the reference to CTA_EXPECT_QUEUENR with was not ever
pushed into Linux kernel ma...

This warning has been there for quite some time, fix it by relaxing the
const type checking.

ca...

Signed-off-by: Jan Engelhardt <[email protected]>
Signed-off-by: Pablo Neira Ayuso <pablo@netfi...

PKG_CHECK_MODULES already produces its own (and more verbose) messsage
when a module cannot be f...

There is no need to call AC_CANONICAL_SYSTEM when only AC_CANONICAL_HOST
is needed. Also, checki...

Note: the use of -i seems required, otherwise autoreconf barfs about
missing tools (depcomp, etc...

Make_global.am:7: "INCLUDES" is the old name for "AM_CPPFLAGS" (or "*_CPPFLAGS")
qa/Makefile.am:...

automake options also need to definitely go into configure.ac, otherwise
they only apply to a si...

Signed-off-by: Pablo Neira Ayuso <[email protected]>

With this patch, we put stack.c and bsf.c out of the documentation
since they are only for inter...

This patch bumps version to 0.9.0 and it bumps the API revision number.

Signed-off-by: Pablo Ne...

This patch fixes an EINVAL error that we hit in Linux kernel <= 2.6.25.
Basically, if we send an...

Still missing several enumerations that should be documented.
You still have to look at libnetfi...

libtoolize: Consider adding `AC_CONFIG_MACRO_DIR([m4])' to configure.in and
libtoolize: rerunnin...

Since Linux kernel 2.6.34, the attribute validation for CTA_HELP_NAME
requires that the string m...

This patch bumps version to 0.0.102 and it bumps the API revision number.

Signed-off-by: Pablo ...

This patch fixes the NAT sequence adjustment setter (they were swapped!).

Signed-off-by: Pablo ...

Signed-off-by: Pablo Neira Ayuso <[email protected]>

This patch fixes kernel-space filtering via BSF for several
network addresses. The problem is th...

make output of nfct_snprintf() similar to /proc/net/nf_conntrack.

tcp 6 23 TIME_WAIT src=X...

Add Patrick's zone support for libnetfilter_conntrack.

Signed-off-by: Pablo Neira Ayuso <pablo@...

This patch fixes parsing of 64 bits attributes (that are unaligned)
in ctnetlink. It would be be...

This patch adds the missing bits to support the modification of the
TCP window scale factor in a...

This patch fixes wrong comments in the libnetfilter_conntrack.h header
file. The counters of the...

This patch bumps libnetfilter_conntrack version to 0.0.101.

Signed-off-by: Pablo Neira Ayuso <p...

This patch fixes the autocomplete feature for ICMP[v6] entries
that makes the kernel return EINV...

Signed-off-by: Hannes Eder <[email protected]>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter....

Signed-off-by: Hannes Eder <[email protected]>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter....

Signed-off-by: Hannes Eder <[email protected]>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter....

This patch bumps libnetfilter_conntrack version to 0.0.100.

Signed-off-by: Pablo Neira Ayuso <p...

This patch unsets all the existing callbacks if we call
nfct_close().

Signed-off-by: Pablo Neir...

This patch the new expectation callback interface. This change is
like 20ed81b10714dfe78e31e9721...

This patch fixes missing endianess conversion of the new
attribute ATTR_HANDSHAKE_SEQ that was i...

This patch renames the attribute constant to access the DCCP
handshake sequence number that was ...

This patch adds the prototype of the u64 getter/setter to the header
file.

Signed-off-by: Pablo...

From: Pablo Neira Ayuso <[email protected]>

This patch adds the support for the DCCP sequence...

This patch adds support to auto-generate BSF code for IPv6. It
requires a Linux kernel >= 2.6.29...

This patch removes a checking that is performed before building the
protocol private information...

This patch updates the version dependency checking.

Signed-off-by: Pablo Neira Ayuso <pablo@net...

This patch partially reverts 76e6042107de23790f0532e3bf3c396cba27e5aa
since it recovers some obs...

This patch adds support for the new SYN_SENT2 state that Jozsef
has introduced to support TCP si...

xt_helper uses a length size of 30 bytes. However, no helper name in
the tree has exceeded 16 by...

This patch avoids possible out-of-bound array access if protocol
states higher than the accepted...

This patch adds nfct_callback_register2() and nfct_callback_unregister2()
that allows to registe...

This patch adds DCCP role attribute support. This needs Linux
kernel >= 2.6.30.

Signed-off-by: ...

This patch adds the missing ATTR_DCCP_STATE in nfct_copy().

Signed-off-by: Pablo Neira Ayuso <p...

This patch adds missing DCCP ports in the output:

# conntrack -D -p dccp
dccp 33 18 RESPOND...

This patch fixes an unfortunate bug in the SCTP vtag parsing.

Signed-off-by: Pablo Neira Ayuso ...

Signed-off-by: Pablo Neira Ayuso <[email protected]>

This patch adds the missing bits to display the protocol state
in the XML output.

Signed-off-by...

This patch merges duplicated protocol string definitions in the
snprintf infrastructure. I have ...

This patch adds initial DCCP support for libnetfilter_conntrack.

Signed-off-by: Pablo Neira Ayu...

This patch refreshes the nfnetlink_conntrack.h copy against 2.6.29.

Signed-off-by: Pablo Neira ...

This patch removes the debian directory. According to the debian
policy, this directory should n...

This patch deprecates several header files that contain enums that
were define in the very old l...

This patch adds support for UDPlite transport protocol.

Signed-off-by: Pablo Neira Ayuso <pablo...

This patch adds support for GRE transport protocol.

Tested-by: Byan Buff <[email protected]>
Sig...

This patch removes a reminiscent constant of the old API whose value
is the same of __DIR_ORIG. ...

This patch resets the library age since the old API has been removed

Signed-off-by: Pablo Neira...

This patch removes the first API version which was scheduled in
2007. That API had several major...

This patch remove the inconditional inclusion of the TCP state
attribute in netlink messages. We...

This patch fixes an inconsistency in enum cta_natseq. The
CTA_NAT_SEQ_UNSPEC was missing.

Signe...

This patch removes the use of strerr(errno) when the returned
valued is != -1. This fixes random...

This patch fixes some minor issues that confuse kernel-doc in the
generation of the API referenc...

Bump libnetfilter_conntrack version to 0.0.99

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter...

This patch fixes a missing stack.h file in Makefile.am. Maintaining
a Makefile.am for the header...

This patch removes unnecessary flags included in NFCT_Q_DUMP,
and NFCT_Q_DESTROY requests for ex...

This patch removes unnecessary flags included in NFCT_Q_DUMP,
NFCT_Q_DUMP_RESET and NFCT_Q_DESTR...

This patch removes unnecessary function inlining in the BSF code
generation. There is not reason...

This patch reworks the BSF automatic generation code. This
feature needs more love and it has se...

This patch fixes a NULL dereference to a function pointer in
nfct_copy() that is triggered when ...

This patch adds a rudimentary test file to check for possible unset
indirect function calls. Thi...

This patch adds the size of the arrays to set to NULL unset
elements. This helps to spot unset f...

Signed-off-by: Pablo Neira Ayuso <[email protected]>

This new function checks for the presence of a given set of
attributes that are passed as an arr...

This new API allows you to set and get some logical set of
attributes. This is not intended to r...

We have to cast the counters to unsigned long long to fix
a compilation warning in 64-bits platf...

This patch introduces likely() and unlikely() that use
__builtin_expect to assist the compiler i...

This patch replaces the use of switch by indirect function calls.

Signed-off-by: Pablo Neira Ay...

This patch adds support for explicit helper assignation. This support
will not be of any help wi...

This patch adds NFCT_CMP_MASK and NFCT_CMP_STRICT which determines the
level of strictness that ...

In nfct_build_query() the *data argument is converted into a u_int8_t*.
This works for little-en...

This patch cleanups the internal headers by splitting them into several
logical pieces.

Signed-...

Fix wrong use of htonl in the example filter.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter...

This patch introduces nfct_filter_set_logic() to set the filtering
logic which results in a more...

This patch adds an abstraction level to berkeley sockets filter (BSF) for
Netlink sockets availa...

The test file requires nf_conntrack_ftp to work properly, otherwise
it returns EINVAL. This patc...

Use `make check' to compile the examples in utils/

Signed-off-by: Pablo Neira Ayuso <pablo@netf...