Linux Netfilter / IP Tables Devel

• Date Index

• [PATCH nf] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone, Florian Westphal
  • Re: [PATCH nf] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone, Stefano Brivio
  • Re: [PATCH nf] netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone, Pablo Neira Ayuso
• Re: nftables >= 0.9.8: atomic update (nft -f ...) of a set not possible any more, Florian Westphal
  • Re: nftables >= 0.9.8: atomic update (nft -f ...) of a set not possible any more, Stefano Brivio
• [PATCH ulogd] GPRINT: fix it with NFLOG, Pablo Neira Ayuso
• INFO: task hung in xt_find_match, kvartet
• INFO: task hung in do_ip6t_get_ctl, kvartet
• [PATCH ulogd2 1/2] output: JSON: fix possible truncation of socket path, Pablo Neira Ayuso
  • [PATCH ulogd2 2/2] output: JSON: remove bogus check for host and port, Pablo Neira Ayuso
• [PATCH nftables,v2 0/7] ruleset optimization infrastructure, Pablo Neira Ayuso
  • [PATCH nftables,v2 1/7] erec: expose print_location() and line_location(), Pablo Neira Ayuso
  • [PATCH nftables,v2 2/7] src: error reporting with -f and read from stdin, Pablo Neira Ayuso
  • [PATCH nftables,v2 3/7] src: remove '$' in symbol_expr_print, Pablo Neira Ayuso
  • [PATCH nftables,v2 5/7] optimize: merge rules with same selectors into a concatenation, Pablo Neira Ayuso
  • [PATCH nftables,v2 4/7] src: add ruleset optimization infrastructure, Pablo Neira Ayuso
  • [PATCH nftables,v2 6/7] optimize: merge same selector with different verdict into verdict map, Pablo Neira Ayuso
  • [PATCH nftables,v2 7/7] optimize: merge several selectors with different verdict into verdict map, Pablo Neira Ayuso
  • Re: [PATCH nftables,v2 0/7] ruleset optimization infrastructure, Pablo Neira Ayuso
  • Re: [PATCH nftables,v2 0/7] ruleset optimization infrastructure, Nicolas Dichtel
  • Re: [PATCH nftables,v2 0/7] ruleset optimization infrastructure, Pablo Neira Ayuso
• [PATCH bpf-next v6 00/11] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 01/11] kernel: Implement try_module_get_live, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v6 01/11] kernel: Implement try_module_get_live, Luis Chamberlain
  • [PATCH bpf-next v6 02/11] bpf: Fix UAF due to race between btf_try_get_module and load_module, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v6 02/11] bpf: Fix UAF due to race between btf_try_get_module and load_module, Alexei Starovoitov
      • Re: [PATCH bpf-next v6 02/11] bpf: Fix UAF due to race between btf_try_get_module and load_module, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf, Alexei Starovoitov
      • Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf, Alexei Starovoitov
          • Re: [PATCH bpf-next v6 03/11] bpf: Populate kfunc BTF ID sets in struct btf, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 04/11] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 05/11] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 06/11] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 07/11] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 08/11] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 09/11] selftests/bpf: Add test_verifier support to fixup kfunc call insns, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 10/11] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module, Alexei Starovoitov
      • Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module, Andrii Nakryiko
          • Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module, Kumar Kartikeya Dwivedi
            • Re: [PATCH bpf-next v6 11/11] selftests/bpf: Add test for race in btf_try_get_module, Andrii Nakryiko
• [PATCH] ipset: SCTP, UDPLITE support added to the bitmap:port type, Quan Tian
• [PATCH linux] netfilter: Remove unnecessary ret assignment, cgel . zte
  • Re: [PATCH linux] netfilter: Remove unnecessary ret assignment, Florian Westphal
• [PATCH bpf-next v5 0/9] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 1/9] kernel: Add kallsyms_on_each_symbol variant for single module, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v5 1/9] kernel: Add kallsyms_on_each_symbol variant for single module, kernel test robot
  • [PATCH bpf-next v5 2/9] bpf: Prepare kfunc BTF ID sets when parsing kernel BTF, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v5 2/9] bpf: Prepare kfunc BTF ID sets when parsing kernel BTF, Alexei Starovoitov
      • Re: [PATCH bpf-next v5 2/9] bpf: Prepare kfunc BTF ID sets when parsing kernel BTF, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v5 2/9] bpf: Prepare kfunc BTF ID sets when parsing kernel BTF, Alexei Starovoitov
  • [PATCH bpf-next v5 3/9] bpf: Remove check_kfunc_call callback and old kfunc BTF ID API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 4/9] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 5/9] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 6/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 7/9] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 8/9] selftests/bpf: Add test_verifier support to fixup kfunc call insns, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v5 9/9] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
  • Re: [PATCH bpf-next v5 0/9] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
• [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Jakub Kicinski
  • Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Florian Fainelli
    • Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Jakub Kicinski
      • Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Andy Shevchenko
  • Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Nikolay Aleksandrov
  • Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Stefano Garzarella
  • Re: [PATCH bpf-next v2] net: don't include filter.h from net/sock.h, Alexei Starovoitov
• [PATCH bpf-next] net: don't include filter.h from net/sock.h, Jakub Kicinski
• [PATCH nf] selftests/netfilter: switch to socat for tests using -q option, Hangbin Liu
  • Re: [PATCH nf] selftests/netfilter: switch to socat for tests using -q option, Florian Westphal
    • Re: [PATCH nf] selftests/netfilter: switch to socat for tests using -q option, Pablo Neira Ayuso
• [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks, trix
  • Re: [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks, Pablo Neira Ayuso
    • Re: [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks, Tom Rix
      • Re: [PATCH] netfilter: extend CONFIG_NF_CONNTRACK compile time checks, Florian Westphal
• [PATCH] netfilter: conntrack: Use max() instead of doing it manually, Jiapeng Chong
  • Re: [PATCH] netfilter: conntrack: Use max() instead of doing it manually, Pablo Neira Ayuso
• [iptables PATCH 00/11] Share do_parse() between nft and legacy, Phil Sutter
  • [iptables PATCH 08/11] xshared: Store parsed wait and wait_interval in xtables_args, Phil Sutter
  • [iptables PATCH 11/11] ip6tables: Use the shared do_parse, too, Phil Sutter
  • [iptables PATCH 05/11] xtables: Pass xtables_args to check_inverse(), Phil Sutter
  • [iptables PATCH 01/11] xtables: Drop xtables' family on demand feature, Phil Sutter
  • [iptables PATCH 03/11] xtables: Move struct nft_xt_cmd_parse to xshared.h, Phil Sutter
  • [iptables PATCH 02/11] xtables: Pull table validity check out of do_parse(), Phil Sutter
  • [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse(), Phil Sutter
    • Re: [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse(), Pablo Neira Ayuso
      • Re: [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse(), Pablo Neira Ayuso
      • Re: [iptables PATCH 06/11] xtables: Do not pass nft_handle to do_parse(), Phil Sutter
  • [iptables PATCH 09/11] nft: Move proto_parse and post_parse callbacks to xshared, Phil Sutter
  • [iptables PATCH 04/11] xtables: Pass xtables_args to check_empty_interface(), Phil Sutter
  • [iptables PATCH 10/11] iptables: Use xtables' do_parse() function, Phil Sutter
  • [iptables PATCH 07/11] xshared: Move do_parse to shared space, Phil Sutter
• [PATCH conntrack 0/4] more updates to use libmnl, Pablo Neira Ayuso
  • [PATCH conntrack 1/4] conntrack: add nfct_mnl_talk() and nfct_mnl_recv() helper functions, Pablo Neira Ayuso
  • [PATCH conntrack 3/4] conntrack: use libmnl to create entry, Pablo Neira Ayuso
  • [PATCH conntrack 2/4] conntrack: add netlink flags to nfct_mnl_nlmsghdr_put(), Pablo Neira Ayuso
  • [PATCH conntrack 4/4] conntrack: pass sock to nfct_mnl_*() functions, Pablo Neira Ayuso
• [PATCH] netfilter: seqadj: check seq offset before update, zhang kai
  • Re: [PATCH] netfilter: seqadj: check seq offset before update, Pablo Neira Ayuso
• [PATCH iptables] xshared: Implement xtables lock timeout using signals, Jethro Beekman
  • Re: [PATCH iptables] xshared: Implement xtables lock timeout using signals, Florian Westphal
• [PATCH netfilter] netfilter: xt_owner: use sk->sk_uid for owner lookup, Maciej Żenczykowski
  • Re: [PATCH netfilter] netfilter: xt_owner: use sk->sk_uid for owner lookup, Jan Engelhardt
    • Re: [PATCH netfilter] netfilter: xt_owner: use sk->sk_uid for owner lookup, Maciej Żenczykowski
• [PATCH] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check(), Xin Xiong
  • Re: [PATCH] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check(), Florian Westphal
  • Re: [PATCH] netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check(), Pablo Neira Ayuso
• [PATCH] netfilter: nft_set_pipapo_avx2: remove redundant pointer lt, Colin Ian King
  • Re: [PATCH] netfilter: nft_set_pipapo_avx2: remove redundant pointer lt, Pablo Neira Ayuso
• [nft PATCH 00/11] Store multiple payload dependencies, Jeremy Sowden
  • [nft PATCH 04/11] netlink_delinearize: fix typo, Jeremy Sowden
  • [nft PATCH 01/11] tests: py: fix inet/sets.t netdev payload, Jeremy Sowden
  • [nft PATCH 02/11] tests: py: fix inet/ip.t payloads, Jeremy Sowden
  • [nft PATCH 05/11] src: remove arithmetic on booleans, Jeremy Sowden
  • [nft PATCH 03/11] tests: py: fix inet/ip_tcp.t test, Jeremy Sowden
  • [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base, Jeremy Sowden
    • Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base, Florian Westphal
      • Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base, Jeremy Sowden
        • Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base, Jeremy Sowden
          • Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base, Florian Westphal
            • Re: [nft PATCH 08/11] src: add a helper that returns a payload dependency for a particular base, Jeremy Sowden
  • [nft PATCH 06/11] src: reduce indentation, Jeremy Sowden
  • [nft PATCH 09/11] src: store more than one payload dependency, Jeremy Sowden
  • [nft PATCH 07/11] src: simplify logic governing storing payload dependencies, Jeremy Sowden
  • [nft PATCH 11/11] tests: shell: remove redundant payload expressions, Jeremy Sowden
  • [nft PATCH 10/11] tests: py: remove redundant payload expressions, Jeremy Sowden
• [PATCH nftables] parser: allow quoted string in flowtable_expr_member, Stijn Tintel
  • Re: [PATCH nftables] parser: allow quoted string in flowtable_expr_member, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: exthdr: add support for tcp option removal, Florian Westphal
  • Re: [PATCH nf-next] netfilter: exthdr: add support for tcp option removal, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: exthdr: add support for tcp option removal, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: exthdr: add support for tcp option removal, Florian Westphal
      • Re: [PATCH nf-next] netfilter: exthdr: add support for tcp option removal, Pablo Neira Ayuso
• [syzbot] KASAN: use-after-free Read in nf_hook_entries_grow, syzbot
  • Re: [syzbot] KASAN: use-after-free Read in nf_hook_entries_grow, syzbot
• netdevconf 0x16, Jamal Hadi Salim
• [PATCH libnetfilter_queue v3] build: doc: Update build_man.sh for doxygen 1.9.2, Duncan Roe
  • Re: [PATCH libnetfilter_queue v3] build: doc: Update build_man.sh for doxygen 1.9.2, Duncan Roe
  • Re: [PATCH libnetfilter_queue v3] build: doc: Update build_man.sh for doxygen 1.9.2, Florian Westphal
• [PATCH iptables] nft-shared: set correc register value, Florian Westphal
  • Re: [PATCH iptables] nft-shared: set correc register value, Pablo Neira Ayuso
• [PATCH nf-next,v3 5/5] netfilter: nf_tables: make counter support built-in, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: flowtable: remove ipv4/ipv6 modules, Florian Westphal
  • Re: [PATCH nf-next] netfilter: flowtable: remove ipv4/ipv6 modules, Pablo Neira Ayuso
• [PATCH nf-next,v2 1/5] netfilter: nf_tables: remove rcu read-size lock, Pablo Neira Ayuso
  • [PATCH nf-next,v2 3/5] netfilter: nf_tables: consolidate rule verdict trace call, Pablo Neira Ayuso
  • [PATCH nf-next,v2 2/5] netfilter: nft_payload: WARN_ON_ONCE instead of BUG, Pablo Neira Ayuso
  • [PATCH nf-next,v2 4/5] netfilter: nf_tables: replace WARN_ON by WARN_ON_ONCE for unknown verdicts, Pablo Neira Ayuso
  • [PATCH nf-next,v2 5/5] netfilter: nf_tables: make counter support built-in, Pablo Neira Ayuso
    • Re: [PATCH nf-next,v2 5/5] netfilter: nf_tables: make counter support built-in, kernel test robot
    • Re: [PATCH nf-next,v2 5/5] netfilter: nf_tables: make counter support built-in, kernel test robot
• [PATCH nf-next v4 0/2] nat: force port remap to prevent shadowing well-known ports, Florian Westphal
  • [PATCH nf-next v4 1/2] netfilter: conntrack: tag conntracks picked up in local out hook, Florian Westphal
  • [PATCH v4 nf-next 2/2] netfilter: nat: force port remap to prevent shadowing well-known ports, Florian Westphal
    • Re: [PATCH v4 nf-next 2/2] netfilter: nat: force port remap to prevent shadowing well-known ports, Eric Garver
  • Re: [PATCH nf-next v4 0/2] nat: force port remap to prevent shadowing well-known ports, Pablo Neira Ayuso
• [PATCH libnetfilter_queue v2] build: doc: Update build_man.sh for doxygen 1.9.2, Duncan Roe
• [PATCH 1/1] graphics/graphviz: Updated for version 2.50, Duncan Roe
  • Re: [PATCH 1/1] graphics/graphviz: Updated for version 2.50, Duncan Roe
• Re: graphviz.SlackBuild, Duncan Roe
  • Re: graphviz.SlackBuild, Duncan Roe
• [PATCH bpf-next v4 00/10] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 01/10] bpf: Refactor bpf_check_mod_kfunc_call, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 02/10] bpf: Remove DEFINE_KFUNC_BTF_ID_SET, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 03/10] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v4 03/10] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support, Alexei Starovoitov
      • Re: [PATCH bpf-next v4 03/10] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 04/10] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v4 04/10] bpf: Introduce mem, size argument pair support for kfunc, Alexei Starovoitov
      • Re: [PATCH bpf-next v4 04/10] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc, Alexei Starovoitov
      • Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc, Alexei Starovoitov
          • Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
            • Re: [PATCH bpf-next v4 05/10] bpf: Add reference tracking support to kfunc, Alexei Starovoitov
  • [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Alexei Starovoitov
      • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Alexei Starovoitov
          • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
            • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Alexei Starovoitov
              • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
                • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Alexei Starovoitov
                  • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
                    • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Alexei Starovoitov
                      • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
                        • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Alexei Starovoitov
                          • Re: [PATCH bpf-next v4 06/10] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 07/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v4 07/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Pablo Neira Ayuso
      • Re: [PATCH bpf-next v4 07/10] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 08/10] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 09/10] selftests/bpf: Add test_verifier support to fixup kfunc call insns, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v4 10/10] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
  • Re: [PATCH bpf-next v4 00/10] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v4 00/10] Introduce unstable CT lookup helpers, Andrii Nakryiko
• [conntrack-tools PATCH 0/3] bison & flex autotools updates, Jeremy Sowden
  • [conntrack-tools PATCH 1/3] build: only require bison and flex if the generated files do not exist, Jeremy Sowden
  • [conntrack-tools PATCH 3/3] build: replace `AM_PROG_LEX` with `AC_PROG_LEX`, Jeremy Sowden
  • [conntrack-tools PATCH 2/3] build: remove MAINTAINERCLEANFILES, Jeremy Sowden
  • Re: [conntrack-tools PATCH 0/3] bison & flex autotools updates, Pablo Neira Ayuso
• [nft PATCH] build: remove scanner.c and parser_bison.c with `maintainer-clean`, Jeremy Sowden
  • Re: [nft PATCH] build: remove scanner.c and parser_bison.c with `maintainer-clean`, Pablo Neira Ayuso
• [PATCH nf v3] netfilter: nat: force port remap to prevent shadowing well-known ports, Florian Westphal
  • Re: [PATCH nf v3] netfilter: nat: force port remap to prevent shadowing well-known ports, Phil Sutter
  • Re: [PATCH nf v3] netfilter: nat: force port remap to prevent shadowing well-known ports, kernel test robot
• [iptables PATCH v3 0/6] Some more code de-duplication, Phil Sutter
  • [iptables PATCH v3 1/6] xshared: Share print_match_save() between legacy ip*tables, Phil Sutter
  • [iptables PATCH v3 3/6] xshared: Share exit_tryhelp(), Phil Sutter
  • [iptables PATCH v3 5/6] libxtables: Extend basic_exit_err(), Phil Sutter
  • [iptables PATCH v3 2/6] xshared: Share a common printhelp function, Phil Sutter
  • [iptables PATCH v3 6/6] iptables-*-restore: Drop pointless line reference, Phil Sutter
  • [iptables PATCH v3 4/6] xtables_globals: Embed variant name in .program_version, Phil Sutter
  • Re: [iptables PATCH v3 0/6] Some more code de-duplication, Pablo Neira Ayuso
• [PATCH nf-next 0/7] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH nf-next 1/7] ipvs: remove unused variable for ip_vs_new_dest, Pablo Neira Ayuso
    • Re: [PATCH nf-next 1/7] ipvs: remove unused variable for ip_vs_new_dest, patchwork-bot+netdevbpf
  • [PATCH nf-next 3/7] netfilter: nf_queue: remove leftover synchronize_rcu, Pablo Neira Ayuso
  • [PATCH nf-next 4/7] netfilter: ctnetlink: remove useless type conversion to bool, Pablo Neira Ayuso
  • [PATCH nf-next 2/7] netfilter: conntrack: Use memset_startat() to zero struct nf_conn, Pablo Neira Ayuso
  • [PATCH nf-next 5/7] netfilter: nft_fwd_netdev: Support egress hook, Pablo Neira Ayuso
  • [PATCH nf-next 6/7] netfilter: bridge: add support for pppoe filtering, Pablo Neira Ayuso
  • [PATCH nf-next 7/7] netfilter: conntrack: Remove useless assignment statements, Pablo Neira Ayuso
• [PATCH nft] proto: revisit short-circuit loops over upper protocols, Pablo Neira Ayuso
  • [PATCH nft] tests: shell: extend catchall tests for maps, Pablo Neira Ayuso
  • Re: [PATCH nft] proto: revisit short-circuit loops over upper protocols, Jeremy Sowden
• [PATCH nft 0/3] ruleset optimization infrastructure, Pablo Neira Ayuso
  • [PATCH nft 1/3] src: add ruleset optimization infrastructure, Pablo Neira Ayuso
  • [PATCH nft 3/3] optimize: merge same selector with different verdict into verdict map, Pablo Neira Ayuso
  • [PATCH nft 2/3] optimize: merge rules with same selectors into a concatenation, Pablo Neira Ayuso
  • Re: [PATCH nft 0/3] ruleset optimization infrastructure, Arturo Borrero Gonzalez
    • Re: [PATCH nft 0/3] ruleset optimization infrastructure, Pablo Neira Ayuso
• [PATCH] build: fix autoconf warnings, Jeremy Sowden
  • Re: [PATCH] build: fix autoconf warnings, Jeremy Sowden
  • Re: [PATCH] build: fix autoconf warnings, Pablo Neira Ayuso
• [PATCH] tests: shell: remove stray debug flag., Jeremy Sowden
  • Re: [PATCH] tests: shell: remove stray debug flag., Jeremy Sowden
  • Re: [PATCH] tests: shell: remove stray debug flag., Pablo Neira Ayuso
• [PATCH nf-next v2 0/2] nat: force port remap to prevent shadowing well-known ports, Florian Westphal
  • [PATCH nf-next v2 1/2] netfilter: conntrack: tag conntracks picked up in local out hook, Florian Westphal
  • [PATCH nf-next v2 2/2] netfilter: nat: force port remap to prevent shadowing well-known ports, Florian Westphal
    • Re: [PATCH nf-next v2 2/2] netfilter: nat: force port remap to prevent shadowing well-known ports, Eric Garver
    • Re: [PATCH nf-next v2 2/2] netfilter: nat: force port remap to prevent shadowing well-known ports, Phil Sutter
• [PATCH] tests: shell: implicit chains simple coverage, Pablo Neira Ayuso
• [PATCH v31 18/28] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
• [PATCH v31 16/28] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
• [PATCH v31 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
• [PATCH v31 09/28] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
• [PATCH v31 08/28] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
• [iptables PATCH v2 0/6] Some more code de-duplication, Phil Sutter
  • [iptables PATCH v2 6/6] iptables-*-restore: Drop pointless line reference, Phil Sutter
  • [iptables PATCH v2 3/6] xshared: Share exit_tryhelp(), Phil Sutter
  • [iptables PATCH v2 1/6] xshared: Share print_match_save() between legacy ip*tables, Phil Sutter
  • [iptables PATCH v2 4/6] xtables_globals: Introduce program_variant, Phil Sutter
    • Re: [iptables PATCH v2 4/6] xtables_globals: Introduce program_variant, Pablo Neira Ayuso
      • Re: [iptables PATCH v2 4/6] xtables_globals: Introduce program_variant, Phil Sutter
  • [iptables PATCH v2 2/6] xshared: Share a common printhelp function, Phil Sutter
  • [iptables PATCH v2 5/6] libxtables: Extend basic_exit_err(), Phil Sutter
• [PATCH net-next 1/2] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance, Eric Dumazet
  • [PATCH net-next 2/2] netfilter: nf_nat_masquerade: add netns refcount tracker to masq_dev_work, Eric Dumazet
    • Re: [PATCH net-next 2/2] netfilter: nf_nat_masquerade: add netns refcount tracker to masq_dev_work, Pablo Neira Ayuso
  • Re: [PATCH net-next 1/2] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance, Pablo Neira Ayuso
    • Re: [PATCH net-next 1/2] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance, Pablo Neira Ayuso
  • Re: [PATCH net-next 1/2] netfilter: nfnetlink: add netns refcount tracker to struct nfulnl_instance, Pablo Neira Ayuso
• [PATCH net] netfilter: nftables: fix use-after-free in nft_set_catchall_destroy(), Eric Dumazet
  • Re: [PATCH net] netfilter: nftables: fix use-after-free in nft_set_catchall_destroy(), Pablo Neira Ayuso
• [nft PATCH 0/3] inet reject statement fix, Jeremy Sowden
  • [nft PATCH 1/3] proto: short-circuit loops over upper protocols, Jeremy Sowden
  • [nft PATCH 2/3] evaluate: correct typo's, Jeremy Sowden
  • [nft PATCH 3/3] evaluate: reject: support ethernet as L2 protcol for inet table, Jeremy Sowden
  • Re: [nft PATCH 0/3] inet reject statement fix, Pablo Neira Ayuso
• [PATCH v3] netfilter: fix regression in looped (broad|multi)cast's MAC handling, Ignacy Gawędzki
  • Re: [PATCH v3] netfilter: fix regression in looped (broad|multi)cast's MAC handling, Pablo Neira Ayuso
• [PATCH bpf-next v3 0/9] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v3 1/9] bpf: Refactor bpf_check_mod_kfunc_call, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v3 2/9] bpf: Remove DEFINE_KFUNC_BTF_ID_SET, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v3 3/9] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v3 4/9] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v3 5/9] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v3 6/9] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Pablo Neira Ayuso
      • Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
        • Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Pablo Neira Ayuso
          • Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Toke Høiland-Jørgensen
            • Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Pablo Neira Ayuso
              • Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Toke Høiland-Jørgensen
                • Re: [PATCH bpf-next v3 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Pablo Neira Ayuso
  • [PATCH bpf-next v3 8/9] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v3 9/9] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
    • Re: [PATCH bpf-next v3 9/9] selftests/bpf: Add test for unstable CT lookup API, Maxim Mikityanskiy
      • Re: [PATCH bpf-next v3 9/9] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
• [PATCH libnetfilter_conntrack] conntrack: don't cancel nest on unknown layer 4 protocols, Pablo Neira Ayuso
• [PATCH] net/netfilter/x_tables.c: Use kvalloc to make your code better, lizhe
  • Re: [PATCH] net/netfilter/x_tables.c: Use kvalloc to make your code better, Florian Westphal
• [PATCH nf-next 00/11] nf_tables datapath ruleset blob and register tracking, Pablo Neira Ayuso
  • [PATCH nf-next 01/11] netfilter: nft_connlimit: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH nf-next 04/11] netfilter: nft_numgen: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH nf-next 07/11] netfilter: nf_tables: add rule blob layout, Pablo Neira Ayuso
  • [PATCH nf-next 02/11] netfilter: nft_last: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH nf-next 08/11] netfilter: nf_tables: add register tracking infrastructure, Pablo Neira Ayuso
  • [PATCH nf-next 03/11] netfilter: nft_quota: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH nf-next 05/11] netfilter: nft_limit: rename stateful structure, Pablo Neira Ayuso
  • [PATCH nf-next 06/11] netfilter: nft_limit: move stateful fields out of expression data, Pablo Neira Ayuso
  • [PATCH nf-next 10/11] netfilter: nft_meta: track register operations, Pablo Neira Ayuso
  • [PATCH nf-next 09/11] netfilter: nft_payload: track register operations, Pablo Neira Ayuso
  • [PATCH nf-next 11/11] netfilter: nft_bitwise: track register operations, Pablo Neira Ayuso
• [PATCH nf-next 0/5] nf_tables misc updates, Pablo Neira Ayuso
  • [PATCH nf-next 1/5] netfilter: nf_tables: remove rcu read-size lock, Pablo Neira Ayuso
  • [PATCH nf-next 2/5] netfilter: nft_payload: WARN_ON_ONCE instead of BUG, Pablo Neira Ayuso
  • [PATCH nf-next 3/5] netfilter: nf_tables: consolidate rule verdict trace call, Pablo Neira Ayuso
  • [PATCH nf-next 4/5] netfilter: nf_tables: replace WARN_ON by WARN_ON_ONCE for unknown verdicts, Pablo Neira Ayuso
  • [PATCH nf-next 5/5] netfilter: nf_tables: make counter support built-in, Pablo Neira Ayuso
• [PATCH nft v2 0/2] Improve handling of errors from mnl* functions", Eugene Crosser
  • [PATCH nft v2 1/2] Use abort() in case of netlink_abi_error, Eugene Crosser
    • Re: [PATCH nft v2 1/2] Use abort() in case of netlink_abi_error, Pablo Neira Ayuso
  • [PATCH nft v2 2/2] Handle retriable errors from mnl functions, Eugene Crosser
    • Re: [PATCH nft v2 2/2] Handle retriable errors from mnl functions, Pablo Neira Ayuso
      • Re: [PATCH nft v2 2/2] Handle retriable errors from mnl functions, Eugene Crosser
        • Re: [PATCH nft v2 2/2] Handle retriable errors from mnl functions, Pablo Neira Ayuso
• [GIT PULL] Networking for 5.16-rc5, Jakub Kicinski
  • Re: [GIT PULL] Networking for 5.16-rc5, pr-tracker-bot
• [PATCH bpf-next v2 0/9] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v2 1/9] bpf: Refactor bpf_check_mod_kfunc_call, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v2 2/9] bpf: Remove DEFINE_KFUNC_BTF_ID_SET, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v2 3/9] bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v2 4/9] bpf: Introduce mem, size argument pair support for kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v2 5/9] bpf: Add reference tracking support to kfunc, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v2 6/9] bpf: Track provenance for pointers formed from referenced PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v2 7/9] net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v2 8/9] selftests/bpf: Extend kfunc selftests, Kumar Kartikeya Dwivedi
  • [PATCH bpf-next v2 9/9] selftests/bpf: Add test for unstable CT lookup API, Kumar Kartikeya Dwivedi
• [PATCH nf] netfilter: ctnetlink: remove expired entries first, Florian Westphal
  • Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first, Vitaly Zuevsky
    • Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first, Florian Westphal
      • Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first, Vitaly Zuevsky
        • Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first, Vitaly Zuevsky
          • Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first, Florian Westphal
            • Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first, Vitaly Zuevsky
              • Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first, Vitaly Zuevsky
  • Re: [PATCH nf] netfilter: ctnetlink: remove expired entries first, Pablo Neira Ayuso
• [PATCH 0/2 nft] mptcp: add mptcp subtype mnemonics, Florian Westphal
  • [PATCH nft 1/2] tcpopt: add phony mptcp suboption datatype, Florian Westphal
  • [PATCH nft 2/2] src: propagate key datatype for anonymous sets, Florian Westphal
    • Re: [PATCH nft 2/2] src: propagate key datatype for anonymous sets, Pablo Neira Ayuso
      • Re: [PATCH nft 2/2] src: propagate key datatype for anonymous sets, Florian Westphal
• [iptables PATCH 0/6] Some more code de-duplication, Phil Sutter
  • [iptables PATCH 4/6] xtables_globals: Introduce program_variant, Phil Sutter
  • [iptables PATCH 5/6] libxtables: Extend basic_exit_err(), Phil Sutter
  • [iptables PATCH 3/6] libxtables: Add xtables_exit_tryhelp(), Phil Sutter
    • Re: [iptables PATCH 3/6] libxtables: Add xtables_exit_tryhelp(), Pablo Neira Ayuso
      • Re: [iptables PATCH 3/6] libxtables: Add xtables_exit_tryhelp(), Phil Sutter
  • [iptables PATCH 1/6] xshared: Share print_match_save() between legacy ip*tables, Phil Sutter
  • [iptables PATCH 6/6] iptables-*-restore: Drop pointless line reference, Phil Sutter
  • [iptables PATCH 2/6] xshared: Share a common printhelp function, Phil Sutter
• [PATCH nft] Improve handling of errors from mnl* functions", Eugene Crosser
  • [PATCH nft 1/2] Use abort() in case of netlink_abi_error, Eugene Crosser
  • [PATCH nft 2/2] Handle retriable errors from mnl functions, Eugene Crosser
    • Re: [PATCH nft 2/2] Handle retriable errors from mnl functions, Pablo Neira Ayuso
      • Re: [PATCH nft 2/2] Handle retriable errors from mnl functions, Eugene Crosser
    • Re: [PATCH nft 2/2] Handle retriable errors from mnl functions, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH nft] Improve handling of errors from mnl* functions", Eugene Crosser
• Fwd: conntrack -L does not show the full table, Vitaly Zuevsky
  • Re: Fwd: conntrack -L does not show the full table, Florian Westphal
    • Re: Fwd: conntrack -L does not show the full table, Vitaly Zuevsky
• Re: [syzbot] possible deadlock in blkdev_put (2), syzbot
• [PATCH linux-next] netfilter: Remove useless assignment statements, cgel . zte
  • Re: [PATCH linux-next] netfilter: Remove useless assignment statements, Pablo Neira Ayuso
• [PATCH net-next] net: netfilter: fix code indentation, Jεan Sacren
• [PATCH net-next] net: bridge: netfilter: fix code indentation, Jεan Sacren
• [PATCH libnetfilter_queue] build: doc: Update build_man.sh for doxygen 1.9.2, Duncan Roe
  • Re: [PATCH libnetfilter_queue] build: doc: Update build_man.sh for doxygen 1.9.2, Pablo Neira Ayuso
    • Re: [PATCH libnetfilter_queue] build: doc: Update build_man.sh for doxygen 1.9.2, Duncan Roe
      • Re: [PATCH libnetfilter_queue] build: doc: Update build_man.sh for doxygen 1.9.2, Pablo Neira Ayuso
• [PATCH net] netfilter: conntrack: annotate data-races around ct->timeout, Eric Dumazet
  • Re: [PATCH net] netfilter: conntrack: annotate data-races around ct->timeout, Pablo Neira Ayuso
• [PATCH nft 0/4] second batch of typeof fixes, Florian Westphal
  • [PATCH nft 1/4] tests: add shift+and typeof test cases, Florian Westphal
  • [PATCH nft 2/4] payload: skip templates with meta key set, Florian Westphal
  • [PATCH nft 3/4] netlink_delinearize: and/shift postprocessing, Florian Westphal
  • [PATCH nft 4/4] netlink_delinearize: zero shift removal, Florian Westphal
  • Re: [PATCH nft 0/4] second batch of typeof fixes, Pablo Neira Ayuso
• [ulogd2 PATCH] build: bump libnetfilter_log dependency, Jeremy Sowden
  • Re: [ulogd2 PATCH] build: bump libnetfilter_log dependency, Pablo Neira Ayuso
• Re: Meaning of "." (dot) in netfilter, Duncan Roe
  • Re: Meaning of "." (dot) in netfilter, Eugene Crosser
    • Re: Meaning of "." (dot) in netfilter, Duncan Roe
• [PATCH nft 0/3] typeof fixes, Florian Westphal
  • [PATCH nft 1/3] ipopt: drop unused 'ptr' argument, Florian Westphal
  • [PATCH nft 2/3] exthdr: support ip/tcp options and sctp chunks in typeof expressions, Florian Westphal
  • [PATCH nft 3/3] iptopt: fix crash with invalid field/type combo, Florian Westphal
  • Re: [PATCH nft 0/3] typeof fixes, Pablo Neira Ayuso
• [PATCH nf] selftests: netfilter: switch zone stress to socat, Florian Westphal
  • Re: [PATCH nf] selftests: netfilter: switch zone stress to socat, Pablo Neira Ayuso
• [RFC PATCH v2] net: Enable some sysctls for the userns root, cgel . zte
• [PATCH net-next] net: Enable some sysctls for the userns root with privilege, cgel . zte
  • Re: [PATCH net-next] net: Enable some sysctls for the userns root with privilege, Jakub Kicinski
    • Re: [PATCH net-next] net: Enable some sysctls for the userns root with privilege, CGEL
      • Re: [PATCH net-next] net: Enable some sysctls for the userns root with privilege, Joanne Koong
• Suboptimal error handling in libnftables, Eugene Crosser
  • Re: Suboptimal error handling in libnftables, Pablo Neira Ayuso
    • Re: Suboptimal error handling in libnftables, Eugene Crosser
      • Re: Suboptimal error handling in libnftables, Pablo Neira Ayuso
    • Re: Suboptimal error handling in libnftables, Eugene Crosser
      • Re: Suboptimal error handling in libnftables, Pablo Neira Ayuso
• [nft PATCH v2 0/5] Reduce cache overhead a bit, Phil Sutter
  • [nft PATCH v2 4/5] cache: Filter set list on server side, Phil Sutter
  • [nft PATCH v2 1/5] cache: Filter tables on kernel side, Phil Sutter
  • [nft PATCH v2 2/5] cache: Filter rule list on kernel side, Phil Sutter
  • [nft PATCH v2 3/5] cache: Filter chain list on kernel side, Phil Sutter
  • [nft PATCH v2 5/5] cache: Support filtering for a specific flowtable, Phil Sutter
  • Re: [nft PATCH v2 0/5] Reduce cache overhead a bit, Pablo Neira Ayuso
• Re: [PATCH -next] mm: delete oversized WARN_ON() in kvmalloc() calls, Andrew Morton
  • Re: [PATCH -next] mm: delete oversized WARN_ON() in kvmalloc() calls, Jeremy Sowden
    • Re: [PATCH -next] mm: delete oversized WARN_ON() in kvmalloc() calls, Alexei Starovoitov
      • Re: [PATCH -next] mm: delete oversized WARN_ON() in kvmalloc() calls, Jeremy Sowden
  • Re: [PATCH -next] mm: delete oversized WARN_ON() in kvmalloc() calls, Bixuan Cui
  • Re: [PATCH -next] mm: delete oversized WARN_ON() in kvmalloc() calls, Sean Christopherson
• [PATCH 0/6] conntrack: use libmnl for various operations, Mikhail Sennikovsky
  • [PATCH 1/6] conntrack: generic nfct_mnl_call function, Mikhail Sennikovsky
  • [PATCH 2/6] conntrack: use libmnl for conntrack entry creation, Mikhail Sennikovsky
  • [PATCH 4/6] conntrack: use libmnl for updating conntrack table, Mikhail Sennikovsky
  • [PATCH 5/6] conntrack: use libmnl for ct entries deletion, Mikhail Sennikovsky
  • [PATCH 3/6] conntrack: pass sock to nfct_mnl_xxx functions, Mikhail Sennikovsky
  • [PATCH 6/6] conntrack: use libmnl for flushing conntrack table, Mikhail Sennikovsky
• [nft PATCH 0/5] Reduce cache overhead a bit, Phil Sutter
  • [nft PATCH 3/5] cache: Filter chain list on kernel side, Phil Sutter
  • [nft PATCH 2/5] cache: Filter rule list on kernel side, Phil Sutter
  • [nft PATCH 5/5] cache: Support filtering for a specific flowtable, Phil Sutter
  • [nft PATCH 4/5] cache: Filter set list on server side, Phil Sutter
  • [nft PATCH 1/5] cache: Filter tables on kernel side, Phil Sutter
  • Re: [nft PATCH 0/5] Reduce cache overhead a bit, Pablo Neira Ayuso
    • Re: [nft PATCH 0/5] Reduce cache overhead a bit, Phil Sutter
      • Re: [nft PATCH 0/5] Reduce cache overhead a bit, Phil Sutter
        • Re: [nft PATCH 0/5] Reduce cache overhead a bit, Pablo Neira Ayuso
• [PATCH nft 0/3] netlink_delinearize cleanups, Florian Westphal
  • [PATCH nft 1/3] netlink_delinearize: use correct member type, Florian Westphal
  • [PATCH nft 2/3] netlink_delinearize: rename misleading variable, Florian Westphal
  • [PATCH nft 3/3] netlink_delinearize: binop: make accesses to expr->left/right conditional, Florian Westphal
  • Re: [PATCH nft 0/3] netlink_delinearize cleanups, Pablo Neira Ayuso
• [PATCH nft] tests: shell: better parameters for the interval stack overflow test, Štěpán Němec
  • Re: [PATCH nft] tests: shell: better parameters for the interval stack overflow test, Florian Westphal
    • Re: [PATCH nft] tests: shell: better parameters for the interval stack overflow test, Štěpán Němec
  • Re: [PATCH nft] tests: shell: better parameters for the interval stack overflow test, Phil Sutter
  • Re: [PATCH nft] tests: shell: better parameters for the interval stack overflow test, Phil Sutter
• [PATCH libnetfilter_queue] build: doc: Warn user if html docs will be missing diagrams, Duncan Roe
  • Re: [PATCH libnetfilter_queue] build: doc: Warn user if html docs will be missing diagrams, Pablo Neira Ayuso
• [ulogd2 PATCH v4 00/32] Fixes for compiler warnings, Jeremy Sowden
  • [ulogd2 PATCH v4 02/32] db: add missing `break` to switch case, Jeremy Sowden
  • [ulogd2 PATCH v4 03/32] filter: HWHDR: simplify flow-control, Jeremy Sowden
  • [ulogd2 PATCH v4 01/32] jhash: add "fall through" comments to switch cases, Jeremy Sowden
  • [ulogd2 PATCH v4 05/32] filter: HWHDR: remove zero-initialization of MAC type, Jeremy Sowden
  • [ulogd2 PATCH v4 06/32] Replace malloc+memset with calloc, Jeremy Sowden
  • [ulogd2 PATCH v4 04/32] filter: HWHDR: re-order KEY_RAW_MAC checks, Jeremy Sowden
  • [ulogd2 PATCH v4 08/32] input: UNIXSOCK: remove stat of socket-path, Jeremy Sowden
  • [ulogd2 PATCH v4 07/32] filter: PWSNIFF: replace malloc+strncpy with strndup, Jeremy Sowden
  • [ulogd2 PATCH v4 09/32] input: UNIXSOCK: fix possible truncation of socket path, Jeremy Sowden
  • [ulogd2 PATCH v4 10/32] input: UNIXSOCK: prevent unaligned pointer access, Jeremy Sowden
  • [ulogd2 PATCH v4 25/32] db: improve mapping of input-keys to DB columns, Jeremy Sowden
  • [ulogd2 PATCH v4 31/32] output: JSON: fix possible truncation of socket path, Jeremy Sowden
  • [ulogd2 PATCH v4 21/32] output: SQLITE3: improve mapping of DB columns to fields, Jeremy Sowden
  • [ulogd2 PATCH v4 13/32] output: DBI: fix NUL-termination of escaped SQL string, Jeremy Sowden
  • [ulogd2 PATCH v4 16/32] output: PGSQL: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v4 14/32] output: DBI: fix configuration of DB connection, Jeremy Sowden
  • [ulogd2 PATCH v4 18/32] output: SQLITE3: fix possible buffer overruns, Jeremy Sowden
  • [ulogd2 PATCH v4 19/32] output: SQLITE3: fix memory-leak in error-handling, Jeremy Sowden
  • [ulogd2 PATCH v4 17/32] output: PGSQL: fix non-`connstring` configuration of DB connection, Jeremy Sowden
  • [ulogd2 PATCH v4 15/32] output: MYSQL: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v4 22/32] output: SQLITE3: improve mapping of fields to DB columns, Jeremy Sowden
  • [ulogd2 PATCH v4 28/32] output: JSON: increase time-stamp buffer size, Jeremy Sowden
  • [ulogd2 PATCH v4 11/32] output: DBI: fix deprecation warnings, Jeremy Sowden
  • [ulogd2 PATCH v4 32/32] output: IPFIX: remove compiler attribute macros, Jeremy Sowden
  • [ulogd2 PATCH v4 12/32] output: DBI: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v4 24/32] db: improve formatting of insert statement, Jeremy Sowden
  • [ulogd2 PATCH v4 26/32] db: simplify initialization of ring-buffer, Jeremy Sowden
  • [ulogd2 PATCH v4 20/32] output: SQLITE3: improve formatting of insert statement, Jeremy Sowden
  • [ulogd2 PATCH v4 27/32] output: JSON: fix output of GMT offset, Jeremy Sowden
  • [ulogd2 PATCH v4 30/32] output: JSON: optimize appending of newline to output, Jeremy Sowden
  • [ulogd2 PATCH v4 29/32] output: JSON: fix possible leak in error-handling., Jeremy Sowden
  • [ulogd2 PATCH v4 23/32] output: SQLITE3: catch errors creating SQL statement, Jeremy Sowden
  • Re: [ulogd2 PATCH v4 00/32] Fixes for compiler warnings, Pablo Neira Ayuso
    • Re: [ulogd2 PATCH v4 00/32] Fixes for compiler warnings, Pablo Neira Ayuso
      • Re: [ulogd2 PATCH v4 00/32] Fixes for compiler warnings, Jeremy Sowden
        • Re: [ulogd2 PATCH v4 00/32] Fixes for compiler warnings, Pablo Neira Ayuso
      • Re: [ulogd2 PATCH v4 00/32] Fixes for compiler warnings, Jeremy Sowden
• [PATCH nf] netfilter: nft_exthdr: break evaluation if setting TCP option fails, Pablo Neira Ayuso
• [PATCH nft] exthdr: fix type number saved in udata, Florian Westphal
  • Re: [PATCH nft] exthdr: fix type number saved in udata, Phil Sutter
• [PATCH nf] netfilter: nat: force port remap to prevent shadowing well-known ports, Florian Westphal
  • Re: [PATCH nf] netfilter: nat: force port remap to prevent shadowing well-known ports, Eric Garver
    • Re: [PATCH nf] netfilter: nat: force port remap to prevent shadowing well-known ports, Florian Westphal
      • Re: [PATCH nf] netfilter: nat: force port remap to prevent shadowing well-known ports, Eric Garver
  • Re: [PATCH nf] netfilter: nat: force port remap to prevent shadowing well-known ports, Pablo Neira Ayuso
    • Re: [PATCH nf] netfilter: nat: force port remap to prevent shadowing well-known ports, Florian Westphal
• [PATCH nf 0/2] nft_set_pipapo: Fix AVX2 MAC address match, add test, Stefano Brivio
  • [PATCH nf 1/2] nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups, Stefano Brivio
    • Re: [PATCH nf 1/2] nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups, Nikita Yushchenko
  • [PATCH nf 2/2] selftests: netfilter: Add correctness test for mac,net set type, Stefano Brivio
    • Re: [PATCH nf 2/2] selftests: netfilter: Add correctness test for mac,net set type, Greg KH
      • Re: [PATCH nf 2/2] selftests: netfilter: Add correctness test for mac,net set type, Stefano Brivio
  • Re: [PATCH nf 0/2] nft_set_pipapo: Fix AVX2 MAC address match, add test, Pablo Neira Ayuso
• [PATCH nf] vrf: don't run conntrack on vrf with !dflt qdisc, Nicolas Dichtel
  • Re: [PATCH nf] vrf: don't run conntrack on vrf with !dflt qdisc, Florian Westphal
  • Re: [PATCH nf] vrf: don't run conntrack on vrf with !dflt qdisc, David Ahern
  • Re: [PATCH nf] vrf: don't run conntrack on vrf with !dflt qdisc, Pablo Neira Ayuso
• [PATCH nf] netfilter: nfnetlink_queue: silence bogus compiler warning, Florian Westphal
  • Re: [PATCH nf] netfilter: nfnetlink_queue: silence bogus compiler warning, Pablo Neira Ayuso
• [PATCH nft] cli: print newline with ctrl-d with editline, Pablo Neira Ayuso
• [PATCH nft,v2] cli: save history on ctrl-d with editline, Pablo Neira Ayuso
• [PATCH nft] cli: save history on ctrl-d, Pablo Neira Ayuso
• [ulogd2 PATCH v3 00/32] Fixes for compiler warnings, Jeremy Sowden
  • [ulogd2 PATCH v3 01/32] jhash: add "fall through" comments to switch cases, Jeremy Sowden
  • [ulogd2 PATCH v3 03/32] filter: HWHDR: simplify flow-control, Jeremy Sowden
  • [ulogd2 PATCH v3 05/32] filter: HWHDR: remove zero-initialization of MAC type, Jeremy Sowden
  • [ulogd2 PATCH v3 07/32] filter: PWSNIFF: replace malloc+strncpy with strndup, Jeremy Sowden
  • [ulogd2 PATCH v3 08/32] input: UNIXSOCK: remove stat of socket-path, Jeremy Sowden
  • [ulogd2 PATCH v3 09/32] input: UNIXSOCK: fix possible truncation of socket path, Jeremy Sowden
  • [ulogd2 PATCH v3 04/32] filter: HWHDR: re-order KEY_RAW_MAC checks, Jeremy Sowden
  • [ulogd2 PATCH v3 06/32] Replace malloc+memset with calloc, Jeremy Sowden
  • [ulogd2 PATCH v3 02/32] db: add missing `break` to switch case, Jeremy Sowden
  • [ulogd2 PATCH v3 29/30] output: JSON: fix possible truncation of socket path, Jeremy Sowden
  • [ulogd2 PATCH v3 16/32] output: PGSQL: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v3 13/32] output: DBI: fix NUL-termination of escaped SQL string, Jeremy Sowden
  • [ulogd2 PATCH v3 28/30] output: JSON: optimize appending of newline to output, Jeremy Sowden
  • [ulogd2 PATCH v3 21/32] output: SQLITE3: improve mapping of DB columns to fields, Jeremy Sowden
  • [ulogd2 PATCH v3 20/32] output: SQLITE3: improve formatting of insert statement, Jeremy Sowden
  • [ulogd2 PATCH v3 28/32] output: JSON: increase time-stamp buffer size, Jeremy Sowden
  • [ulogd2 PATCH v3 17/30] output: SQLITE3: fix memory-leak in error-handling, Jeremy Sowden
  • [ulogd2 PATCH v3 26/32] db: simplify initialization of ring-buffer, Jeremy Sowden
  • [ulogd2 PATCH v3 27/32] output: JSON: fix output of GMT offset, Jeremy Sowden
  • [ulogd2 PATCH v3 11/32] output: DBI: fix deprecation warnings, Jeremy Sowden
  • [ulogd2 PATCH v3 10/32] input: UNIXSOCK: prevent unaligned pointer access, Jeremy Sowden
  • [ulogd2 PATCH v3 21/30] output: SQLITE3: catch errors creating SQL statement, Jeremy Sowden
  • [ulogd2 PATCH v3 20/30] output: SQLITE3: improve mapping of fields to DB columns, Jeremy Sowden
  • [ulogd2 PATCH v3 15/30] output: PGSQL: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v3 19/32] output: SQLITE3: fix memory-leak in error-handling, Jeremy Sowden
  • [ulogd2 PATCH v3 27/30] output: JSON: fix possible leak in error-handling., Jeremy Sowden
  • [ulogd2 PATCH v3 19/30] output: SQLITE3: improve mapping of DB columns to fields, Jeremy Sowden
  • [ulogd2 PATCH v3 29/32] output: JSON: fix possible leak in error-handling., Jeremy Sowden
  • [ulogd2 PATCH v3 30/32] output: JSON: optimize appending of newline to output, Jeremy Sowden
  • [ulogd2 PATCH v3 22/30] db: improve formatting of insert statement, Jeremy Sowden
  • [ulogd2 PATCH v3 22/32] output: SQLITE3: improve mapping of fields to DB columns, Jeremy Sowden
  • [ulogd2 PATCH v3 18/32] output: SQLITE3: fix possible buffer overruns, Jeremy Sowden
  • [ulogd2 PATCH v3 14/32] output: DBI: fix configuration of DB connection, Jeremy Sowden
  • [ulogd2 PATCH v3 31/32] output: JSON: fix possible truncation of socket path, Jeremy Sowden
  • [ulogd2 PATCH v3 32/32] output: IPFIX: remove compiler attribute macros, Jeremy Sowden
  • [ulogd2 PATCH v3 15/32] output: MYSQL: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v3 24/32] db: improve formatting of insert statement, Jeremy Sowden
  • [ulogd2 PATCH v3 23/30] db: improve mapping of input-keys to DB columns, Jeremy Sowden
  • [ulogd2 PATCH v3 12/32] output: DBI: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v3 17/32] output: PGSQL: fix non-`connstring` configuration of DB connection, Jeremy Sowden
  • [ulogd2 PATCH v3 25/32] db: improve mapping of input-keys to DB columns, Jeremy Sowden
  • [ulogd2 PATCH v3 30/30] output: IPFIX: remove compiler attribute macros, Jeremy Sowden
  • [ulogd2 PATCH v3 24/30] db: replace `strncpy` with `strcpy`, Jeremy Sowden
  • [ulogd2 PATCH v3 14/30] output: MYSQL: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v3 26/30] output: JSON: increase time-stamp buffer size, Jeremy Sowden
  • [ulogd2 PATCH v3 18/30] output: SQLITE3: improve formatting of insert statement, Jeremy Sowden
  • [ulogd2 PATCH v3 23/32] output: SQLITE3: catch errors creating SQL statement, Jeremy Sowden
  • [ulogd2 PATCH v3 25/30] output: JSON: fix output of GMT offset, Jeremy Sowden
  • [ulogd2 PATCH v3 16/30] output: SQLITE3: fix possible buffer overruns, Jeremy Sowden
  • Re: [ulogd2 PATCH v3 00/32] Fixes for compiler warnings, Jeremy Sowden
• [nft PATCH 00/15] Fix netlink debug output on Big Endian, Phil Sutter
  • [nft PATCH 02/15] exthdr: Fix for segfault with unknown exthdr, Phil Sutter
  • [nft PATCH 07/15] datatype: Fix size of time_type, Phil Sutter
  • [nft PATCH 12/15] include: Use struct nftnl_set_desc, Phil Sutter
  • [nft PATCH 13/15] mnl: Provide libnftnl with set element meta info when dumping, Phil Sutter
  • [nft PATCH 11/15] evaluate: Fix key byteorder value in range sets/maps, Phil Sutter
  • [nft PATCH 05/15] meta: Fix {g,u}id_type on Big Endian, Phil Sutter
  • [nft PATCH 08/15] ct: Fix ct label value parser, Phil Sutter
  • [nft PATCH 01/15] tests/py: Avoid duplicate records in *.got files, Phil Sutter
  • [nft PATCH 14/15] tests/py/tools: Add regen_payloads.sh, Phil Sutter
  • [nft PATCH 06/15] meta: Fix hour_type size, Phil Sutter
  • [nft PATCH 10/15] Make string-based data types Big Endian, Phil Sutter
  • [nft PATCH 04/15] src: Fix payload statement mask on Big Endian, Phil Sutter
  • [nft PATCH 09/15] netlink_delinearize: Fix for escaped asterisk strings on Big Endian, Phil Sutter
  • [nft PATCH 03/15] mnl: Fix for missing info in rule dumps, Phil Sutter
  • Re: [nft PATCH 00/15] Fix netlink debug output on Big Endian, Pablo Neira Ayuso
    • Re: [nft PATCH 00/15] Fix netlink debug output on Big Endian, Phil Sutter
• [libnftnl PATCH 0/7] Stabilize debug output on different endian systems, Phil Sutter
  • [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA, Phil Sutter
    • Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA, Pablo Neira Ayuso
      • Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA, Phil Sutter
        • Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA, Pablo Neira Ayuso
          • Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA, Phil Sutter
            • Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA, Pablo Neira Ayuso
  • [libnftnl PATCH 4/7] data_reg: Support varying byteorder in concat data, Phil Sutter
  • [libnftnl PATCH v2 1/7] src: add infrastructure to infer byteorder from keys, Phil Sutter
    • Re: [libnftnl PATCH v2 1/7] src: add infrastructure to infer byteorder from keys, Jeremy Sowden
  • [libnftnl PATCH 5/7] data_reg: Respect each value's size, Phil Sutter
  • [libnftnl PATCH 7/7] set: Introduce nftnl_set_elem_snprintf_desc(), Phil Sutter
  • [libnftnl PATCH 2/7] set: Introduce NFTNL_SET_DESC_BYTEORDER, Phil Sutter
  • [libnftnl PATCH 6/7] include: Introduce and publish struct nftnl_set_desc, Phil Sutter
• [PATCH] net/netfilter: remove useless type conversion to bool, Bernard Zhao
  • Re: [PATCH] net/netfilter: remove useless type conversion to bool, Pablo Neira Ayuso
• [PATCH v30 18/28] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
• [PATCH v30 16/28] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
• [PATCH v30 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
• [PATCH v30 09/28] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
• [PATCH v30 08/28] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
• [PATCH nf] netfilter: bridge: add support for ppoe filtering, Florian Westphal
  • Re: [PATCH nf] netfilter: bridge: add support for ppoe filtering, Pablo Neira Ayuso
• [PATCH nft,v2] cli: remove #include <editline/history.h>, Pablo Neira Ayuso
• [PATCH nft] cli: remove #include <editline/history.h>, Pablo Neira Ayuso
• [PATCH nft] mnl: different signedness compilation warning, Pablo Neira Ayuso
• [ulogd2 PATCH 0/5] Format string fixes, Jeremy Sowden
  • [ulogd2 PATCH 2/5] ulogd: remove empty log-line, Jeremy Sowden
  • [ulogd2 PATCH 4/5] input: UNIXSOCK: correct format specifiers, Jeremy Sowden
  • [ulogd2 PATCH 3/5] ulogd: fix order of log arguments, Jeremy Sowden
  • [ulogd2 PATCH 5/5] output: IPFIX: correct format specifiers, Jeremy Sowden
  • [ulogd2 PATCH 1/5] include: add `format` attribute to `__ulogd_log` declaration, Jeremy Sowden
  • Re: [ulogd2 PATCH 0/5] Format string fixes, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Florian Westphal
      • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Pablo Neira Ayuso
        • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Florian Westphal
          • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Eyal Birger
            • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Florian Westphal
    • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Eyal Birger
      • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Karel Rericha
• [PATCH nf-next,v2] netfilter: conntrack: configurable conntrack gc scan interval, Eyal Birger
  • Re: [PATCH nf-next,v2] netfilter: conntrack: configurable conntrack gc scan interval, Florian Westphal
    • Re: [PATCH nf-next,v2] netfilter: conntrack: configurable conntrack gc scan interval, Eyal Birger
• [PATCH nf-next] netfilter: conntrack: configurable conntrack gc scan interval, Eyal Birger
  • Re: [PATCH nf-next] netfilter: conntrack: configurable conntrack gc scan interval, kernel test robot
• [PATCH nft 0/8] mptcp subtype option match support, Florian Westphal
  • [PATCH nft 1/8] tcpopt: remove KIND keyword, Florian Westphal
  • [PATCH nft 2/8] scanner: add tcp flex scope, Florian Westphal
  • [PATCH nft 3/8] parser: split tcp option rules, Florian Westphal
  • [PATCH nft 4/8] tcpopt: add md5sig, fastopen and mptcp options, Florian Westphal
  • [PATCH nft 5/8] tests: py: add test cases for md5sig, fastopen and mptcp mnemonics, Florian Westphal
  • [PATCH nft 6/8] mptcp: add subtype matching, Florian Westphal
  • [PATCH nft 7/8] exthdr: fix tcpopt_find_template to use length after mask adjustment, Florian Westphal
  • [PATCH nft 8/8] tests: py: add tcp subtype match test cases, Florian Westphal
  • Re: [PATCH nft 0/8] mptcp subtype option match support, Pablo Neira Ayuso
    • Re: [PATCH nft 0/8] mptcp subtype option match support, Florian Westphal
      • Re: [PATCH nft 0/8] mptcp subtype option match support, Pablo Neira Ayuso
        • Re: [PATCH nft 0/8] mptcp subtype option match support, Florian Westphal
          • Re: [PATCH nft 0/8] mptcp subtype option match support, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_queue: remove leftover synchronize_rcu, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_queue: remove leftover synchronize_rcu, Pablo Neira Ayuso
• [libnetfilter_log PATCH] build: fix `--disable-static`, Jeremy Sowden
  • Re: [libnetfilter_log PATCH] build: fix `--disable-static`, Pablo Neira Ayuso
• [PATCH nft] Revert "configure: default to libedit for cli", Pablo Neira Ayuso
  • Re: [PATCH nft] Revert "configure: default to libedit for cli", Pablo Neira Ayuso
• [PATCH] netfilter: conntrack: Use memset_startat() to zero struct nf_conn, Kees Cook
  • Re: [PATCH] netfilter: conntrack: Use memset_startat() to zero struct nf_conn, Pablo Neira Ayuso
• [PATCH nft] configure: fall back to readline if libedit is not available, Pablo Neira Ayuso
• [PATCH nft,v2] cache: do not skip populating anonymous set with -t, Pablo Neira Ayuso
• [PATCH nft] cache: do not skip populating anonymous set with -t, Pablo Neira Ayuso
• [ANNOUNCE] nftables 1.0.1 release, Pablo Neira Ayuso
• [ANNOUNCE] libnftnl 1.2.1 release, Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_log 1.0.2 release, Pablo Neira Ayuso
• [PATCH nft] monitor: do not call interval_map_decompose() for concat intervals, Florian Westphal
  • Re: [PATCH nft] monitor: do not call interval_map_decompose() for concat intervals, Pablo Neira Ayuso
• [PATCH nf-next 0/2] netfilter: conntrack: speed up netns dismantle, Florian Westphal
  • [PATCH nf-next 1/2] netfilter: conntrack: split nf_conntrack_cleanup_net_list, Florian Westphal
  • [PATCH nf-next 2/2] netfilter: conntrack: speed up netns cleanup, Florian Westphal
• [PATCH nft] parser_json: add raw payload inner header match support, Pablo Neira Ayuso
• [PATCH libnftnl] expr: payload: print inner header base offset, Pablo Neira Ayuso
• Re: "AVX2-based lookup implementation" has broken ebtables --among-src, Stefano Brivio
  • Re: "AVX2-based lookup implementation" has broken ebtables --among-src, Florian Westphal