conntrack-tools branch, vyatta/expect, updated. conntrack-tools-1.0.0-13-g592dde9
Pablo Neira Ayuso
netfilter-cvslog-bounces at lists.netfilter.org
Thu Oct 27 13:16:04 CEST 2011
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "conntrack-tools".
The branch, vyatta/expect has been updated
discards d33bd7c7f9c811cf3b9c49a4663e0396af9f1584 (commit)
discards 3affa173b1a112b81e75beb33236124c184a510d (commit)
discards 7d0ae4d66f32c551c6f52efff7a81dc96a89bafb (commit)
discards 971e7fd9ffc0cae888dfe562e7f4873a6da94fa9 (commit)
discards dd686eded1ea53e3d344231bdff5baa6b93b7376 (commit)
discards 278a0004858c2bf046da05f73bdff4199976610d (commit)
via 592dde9d82a3d36e5dd24ffc6f9627255f6fcd7f (commit)
via e0c9136c774751a5a38979a32c634da43dd3e768 (commit)
via bd03a1d928582d99d7636a56980a6b14a331bd62 (commit)
via 8f5bb2c7aeebb31b0048972ecd96a95783a9bf04 (commit)
via 0e552be16673c92f64a4114193a56d965672ce8c (commit)
via 6da2810dd73d7b39ffe781ea0c110869ac158406 (commit)
This update added new revisions after undoing existing revisions. That is
to say, the old revision is not a strict subset of the new revision. This
situation occurs when you --force push a change and generate a repository
containing something like this:
* -- * -- B -- O -- O -- O (d33bd7c7f9c811cf3b9c49a4663e0396af9f1584)
\
N -- N -- N (592dde9d82a3d36e5dd24ffc6f9627255f6fcd7f)
When this happens we assume that you've already had alert emails for all
of the O revisions, and so we here report only the revisions in the N
branch from the common base, B.
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 592dde9d82a3d36e5dd24ffc6f9627255f6fcd7f
Author: Pablo Neira Ayuso <pablo at netfilter.org>
Date: Thu Oct 27 13:01:40 2011 +0200
conntrackd: initial support for expectations (imcomplete!)
This patch adds initial support to synchronize expectations.
Note that *it is imcomplete*. Currently, it only adds and
deletes the expectation in the internal cache:
You have to enable the expectation support in the configuration
file with the following option:
Sync {
...
Options {
ExpectationSync On
}
}
Still needs to be implemented:
- Initial dump of the expect table.
- The object to message build/parse functions.
- The direct injection.
- Commit operation.
- Flush operation.
- User-space filtering.
Among others.
You'll have to get a fresh working copy of libnetfilter_conntrack,
otherwise you'll hit one assertion in nfct_cmp().
Signed-off-by: Pablo Neira Ayuso <pablo at netfilter.org>
commit e0c9136c774751a5a38979a32c634da43dd3e768
Author: Pablo Neira Ayuso <pablo at netfilter.org>
Date: Thu Oct 27 12:18:34 2011 +0200
conntrackd: generalize local handler actions
This patch prepares the introduction of actions with the expectation
table. Mostly renamings.
Signed-off-by: Pablo Neira Ayuso <pablo at netfilter.org>
commit bd03a1d928582d99d7636a56980a6b14a331bd62
Author: Pablo Neira Ayuso <pablo at netfilter.org>
Date: Wed Oct 26 12:54:13 2011 +0200
conntrackd: generalize/cleanup network message building/parsing
This patch generalizes the network message building and parsing
to prepare the upcoming expectation support.
Basically, it renames:
- NET_T_STATE_* by NET_T_STATE_CT_*, as I plan to add NET_T_STATE_EXP_*
- BUILD_NETMSG by BUILD_NETMSG_FROM_CT, and build_payload by ct2msg.
I plan to add exp2msg.
- parse_payload by msg2ct, since I plan to add msg2exp.
- object_status_to_network_type by ct_object_status_to_network_type, as
we will have exp_object_status_to_network_type at some point.
- add prefix ct_ to all parsing functions in parse.c, as we will have
similar functions to convert messages to expectation objects.
Signed-off-by: Pablo Neira Ayuso <pablo at netfilter.org>
commit 8f5bb2c7aeebb31b0048972ecd96a95783a9bf04
Author: Pablo Neira Ayuso <pablo at netfilter.org>
Date: Thu Oct 27 12:04:50 2011 +0200
conntrackd: generalize external handlers to prepare expectation support
This patch contains cleanups to prepare the expectation support for
external handlers. Mostly renamings.
I have also updated the file headers to include Vyatta in the copyright
statement.
Signed-off-by: Pablo Neira Ayuso <pablo at netfilter.org>
commit 0e552be16673c92f64a4114193a56d965672ce8c
Author: Pablo Neira Ayuso <pablo at netfilter.org>
Date: Tue Oct 25 08:07:42 2011 +0200
conntrackd: generalize internal handlers to prepare expectation support
This patch contains cleanups to prepare the expectation support for
internal handlers. Mostly renamings.
I have also updated the file headers to include Vyatta in the copyright
statement.
Signed-off-by: Pablo Neira Ayuso <pablo at netfilter.org>
commit 6da2810dd73d7b39ffe781ea0c110869ac158406
Author: Pablo Neira Ayuso <pablo at netfilter.org>
Date: Mon Oct 24 12:16:02 2011 +0200
conntrackd: generalize caching infrastructure
This patch generalizes the caching infrastructure to store different
object types. This patch is the first in the series to prepare
support for the synchronization of expectations.
Signed-off-by: Pablo Neira Ayuso <pablo at netfilter.org>
-----------------------------------------------------------------------
Summary of changes:
src/cache-ct.c | 16 ++++++++--------
1 files changed, 8 insertions(+), 8 deletions(-)
hooks/post-receive
--
conntrack-tools
More information about the netfilter-cvslog
mailing list