Linux Netfilter / IP Tables Devel

• Date Index

• [ulogd2 PATCH v3 00/32] Fixes for compiler warnings, Jeremy Sowden
  • [ulogd2 PATCH v3 01/32] jhash: add "fall through" comments to switch cases, Jeremy Sowden
  • [ulogd2 PATCH v3 03/32] filter: HWHDR: simplify flow-control, Jeremy Sowden
  • [ulogd2 PATCH v3 05/32] filter: HWHDR: remove zero-initialization of MAC type, Jeremy Sowden
  • [ulogd2 PATCH v3 07/32] filter: PWSNIFF: replace malloc+strncpy with strndup, Jeremy Sowden
  • [ulogd2 PATCH v3 08/32] input: UNIXSOCK: remove stat of socket-path, Jeremy Sowden
  • [ulogd2 PATCH v3 09/32] input: UNIXSOCK: fix possible truncation of socket path, Jeremy Sowden
  • [ulogd2 PATCH v3 04/32] filter: HWHDR: re-order KEY_RAW_MAC checks, Jeremy Sowden
  • [ulogd2 PATCH v3 06/32] Replace malloc+memset with calloc, Jeremy Sowden
  • [ulogd2 PATCH v3 02/32] db: add missing `break` to switch case, Jeremy Sowden
  • [ulogd2 PATCH v3 29/30] output: JSON: fix possible truncation of socket path, Jeremy Sowden
  • [ulogd2 PATCH v3 16/32] output: PGSQL: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v3 13/32] output: DBI: fix NUL-termination of escaped SQL string, Jeremy Sowden
  • [ulogd2 PATCH v3 28/30] output: JSON: optimize appending of newline to output, Jeremy Sowden
  • [ulogd2 PATCH v3 21/32] output: SQLITE3: improve mapping of DB columns to fields, Jeremy Sowden
  • [ulogd2 PATCH v3 20/32] output: SQLITE3: improve formatting of insert statement, Jeremy Sowden
  • [ulogd2 PATCH v3 28/32] output: JSON: increase time-stamp buffer size, Jeremy Sowden
  • [ulogd2 PATCH v3 17/30] output: SQLITE3: fix memory-leak in error-handling, Jeremy Sowden
  • [ulogd2 PATCH v3 26/32] db: simplify initialization of ring-buffer, Jeremy Sowden
  • [ulogd2 PATCH v3 27/32] output: JSON: fix output of GMT offset, Jeremy Sowden
  • [ulogd2 PATCH v3 11/32] output: DBI: fix deprecation warnings, Jeremy Sowden
  • [ulogd2 PATCH v3 10/32] input: UNIXSOCK: prevent unaligned pointer access, Jeremy Sowden
  • [ulogd2 PATCH v3 21/30] output: SQLITE3: catch errors creating SQL statement, Jeremy Sowden
  • [ulogd2 PATCH v3 20/30] output: SQLITE3: improve mapping of fields to DB columns, Jeremy Sowden
  • [ulogd2 PATCH v3 15/30] output: PGSQL: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v3 19/32] output: SQLITE3: fix memory-leak in error-handling, Jeremy Sowden
  • [ulogd2 PATCH v3 27/30] output: JSON: fix possible leak in error-handling., Jeremy Sowden
  • [ulogd2 PATCH v3 19/30] output: SQLITE3: improve mapping of DB columns to fields, Jeremy Sowden
  • [ulogd2 PATCH v3 29/32] output: JSON: fix possible leak in error-handling., Jeremy Sowden
  • [ulogd2 PATCH v3 30/32] output: JSON: optimize appending of newline to output, Jeremy Sowden
  • [ulogd2 PATCH v3 22/30] db: improve formatting of insert statement, Jeremy Sowden
  • [ulogd2 PATCH v3 22/32] output: SQLITE3: improve mapping of fields to DB columns, Jeremy Sowden
  • [ulogd2 PATCH v3 18/32] output: SQLITE3: fix possible buffer overruns, Jeremy Sowden
  • [ulogd2 PATCH v3 14/32] output: DBI: fix configuration of DB connection, Jeremy Sowden
  • [ulogd2 PATCH v3 31/32] output: JSON: fix possible truncation of socket path, Jeremy Sowden
  • [ulogd2 PATCH v3 32/32] output: IPFIX: remove compiler attribute macros, Jeremy Sowden
  • [ulogd2 PATCH v3 15/32] output: MYSQL: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v3 24/32] db: improve formatting of insert statement, Jeremy Sowden
  • [ulogd2 PATCH v3 23/30] db: improve mapping of input-keys to DB columns, Jeremy Sowden
  • [ulogd2 PATCH v3 12/32] output: DBI: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v3 17/32] output: PGSQL: fix non-`connstring` configuration of DB connection, Jeremy Sowden
  • [ulogd2 PATCH v3 25/32] db: improve mapping of input-keys to DB columns, Jeremy Sowden
  • [ulogd2 PATCH v3 30/30] output: IPFIX: remove compiler attribute macros, Jeremy Sowden
  • [ulogd2 PATCH v3 24/30] db: replace `strncpy` with `strcpy`, Jeremy Sowden
  • [ulogd2 PATCH v3 14/30] output: MYSQL: improve mapping of DB columns to input-keys, Jeremy Sowden
  • [ulogd2 PATCH v3 26/30] output: JSON: increase time-stamp buffer size, Jeremy Sowden
  • [ulogd2 PATCH v3 18/30] output: SQLITE3: improve formatting of insert statement, Jeremy Sowden
  • [ulogd2 PATCH v3 23/32] output: SQLITE3: catch errors creating SQL statement, Jeremy Sowden
  • [ulogd2 PATCH v3 25/30] output: JSON: fix output of GMT offset, Jeremy Sowden
  • [ulogd2 PATCH v3 16/30] output: SQLITE3: fix possible buffer overruns, Jeremy Sowden
  • Re: [ulogd2 PATCH v3 00/32] Fixes for compiler warnings, Jeremy Sowden
• [nft PATCH 00/15] Fix netlink debug output on Big Endian, Phil Sutter
  • [nft PATCH 02/15] exthdr: Fix for segfault with unknown exthdr, Phil Sutter
  • [nft PATCH 07/15] datatype: Fix size of time_type, Phil Sutter
  • [nft PATCH 12/15] include: Use struct nftnl_set_desc, Phil Sutter
  • [nft PATCH 13/15] mnl: Provide libnftnl with set element meta info when dumping, Phil Sutter
  • [nft PATCH 11/15] evaluate: Fix key byteorder value in range sets/maps, Phil Sutter
  • [nft PATCH 05/15] meta: Fix {g,u}id_type on Big Endian, Phil Sutter
  • [nft PATCH 08/15] ct: Fix ct label value parser, Phil Sutter
  • [nft PATCH 01/15] tests/py: Avoid duplicate records in *.got files, Phil Sutter
  • [nft PATCH 14/15] tests/py/tools: Add regen_payloads.sh, Phil Sutter
  • [nft PATCH 06/15] meta: Fix hour_type size, Phil Sutter
  • [nft PATCH 10/15] Make string-based data types Big Endian, Phil Sutter
  • [nft PATCH 04/15] src: Fix payload statement mask on Big Endian, Phil Sutter
  • [nft PATCH 09/15] netlink_delinearize: Fix for escaped asterisk strings on Big Endian, Phil Sutter
  • [nft PATCH 03/15] mnl: Fix for missing info in rule dumps, Phil Sutter
  • Re: [nft PATCH 00/15] Fix netlink debug output on Big Endian, Pablo Neira Ayuso
    • Re: [nft PATCH 00/15] Fix netlink debug output on Big Endian, Phil Sutter
• [libnftnl PATCH 0/7] Stabilize debug output on different endian systems, Phil Sutter
  • [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA, Phil Sutter
    • Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA, Pablo Neira Ayuso
      • Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA, Phil Sutter
        • Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA, Pablo Neira Ayuso
          • Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA, Phil Sutter
            • Re: [libnftnl PATCH 3/7] set: Introduce NFTNL_SET_DESC_CONCAT_DATA, Pablo Neira Ayuso
  • [libnftnl PATCH 4/7] data_reg: Support varying byteorder in concat data, Phil Sutter
  • [libnftnl PATCH v2 1/7] src: add infrastructure to infer byteorder from keys, Phil Sutter
    • Re: [libnftnl PATCH v2 1/7] src: add infrastructure to infer byteorder from keys, Jeremy Sowden
  • [libnftnl PATCH 5/7] data_reg: Respect each value's size, Phil Sutter
  • [libnftnl PATCH 7/7] set: Introduce nftnl_set_elem_snprintf_desc(), Phil Sutter
  • [libnftnl PATCH 2/7] set: Introduce NFTNL_SET_DESC_BYTEORDER, Phil Sutter
  • [libnftnl PATCH 6/7] include: Introduce and publish struct nftnl_set_desc, Phil Sutter
• [PATCH] net/netfilter: remove useless type conversion to bool, Bernard Zhao
  • Re: [PATCH] net/netfilter: remove useless type conversion to bool, Pablo Neira Ayuso
• [PATCH v30 18/28] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
• [PATCH v30 16/28] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
• [PATCH v30 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
• [PATCH v30 09/28] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
• [PATCH v30 08/28] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
• [PATCH nf] netfilter: bridge: add support for ppoe filtering, Florian Westphal
  • Re: [PATCH nf] netfilter: bridge: add support for ppoe filtering, Pablo Neira Ayuso
• [PATCH nft,v2] cli: remove #include <editline/history.h>, Pablo Neira Ayuso
• [PATCH nft] cli: remove #include <editline/history.h>, Pablo Neira Ayuso
• [PATCH nft] mnl: different signedness compilation warning, Pablo Neira Ayuso
• [ulogd2 PATCH 0/5] Format string fixes, Jeremy Sowden
  • [ulogd2 PATCH 2/5] ulogd: remove empty log-line, Jeremy Sowden
  • [ulogd2 PATCH 4/5] input: UNIXSOCK: correct format specifiers, Jeremy Sowden
  • [ulogd2 PATCH 3/5] ulogd: fix order of log arguments, Jeremy Sowden
  • [ulogd2 PATCH 5/5] output: IPFIX: correct format specifiers, Jeremy Sowden
  • [ulogd2 PATCH 1/5] include: add `format` attribute to `__ulogd_log` declaration, Jeremy Sowden
  • Re: [ulogd2 PATCH 0/5] Format string fixes, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Florian Westphal
  • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Florian Westphal
      • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Pablo Neira Ayuso
        • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Florian Westphal
          • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Eyal Birger
            • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Florian Westphal
    • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Eyal Birger
      • Re: [PATCH nf-next] netfilter: conntrack: allow to tune gc behavior, Karel Rericha
• [PATCH nf-next,v2] netfilter: conntrack: configurable conntrack gc scan interval, Eyal Birger
  • Re: [PATCH nf-next,v2] netfilter: conntrack: configurable conntrack gc scan interval, Florian Westphal
    • Re: [PATCH nf-next,v2] netfilter: conntrack: configurable conntrack gc scan interval, Eyal Birger
• [PATCH nf-next] netfilter: conntrack: configurable conntrack gc scan interval, Eyal Birger
  • Re: [PATCH nf-next] netfilter: conntrack: configurable conntrack gc scan interval, kernel test robot
• [PATCH nft 0/8] mptcp subtype option match support, Florian Westphal
  • [PATCH nft 1/8] tcpopt: remove KIND keyword, Florian Westphal
  • [PATCH nft 2/8] scanner: add tcp flex scope, Florian Westphal
  • [PATCH nft 3/8] parser: split tcp option rules, Florian Westphal
  • [PATCH nft 4/8] tcpopt: add md5sig, fastopen and mptcp options, Florian Westphal
  • [PATCH nft 5/8] tests: py: add test cases for md5sig, fastopen and mptcp mnemonics, Florian Westphal
  • [PATCH nft 6/8] mptcp: add subtype matching, Florian Westphal
  • [PATCH nft 7/8] exthdr: fix tcpopt_find_template to use length after mask adjustment, Florian Westphal
  • [PATCH nft 8/8] tests: py: add tcp subtype match test cases, Florian Westphal
  • Re: [PATCH nft 0/8] mptcp subtype option match support, Pablo Neira Ayuso
    • Re: [PATCH nft 0/8] mptcp subtype option match support, Florian Westphal
      • Re: [PATCH nft 0/8] mptcp subtype option match support, Pablo Neira Ayuso
        • Re: [PATCH nft 0/8] mptcp subtype option match support, Florian Westphal
          • Re: [PATCH nft 0/8] mptcp subtype option match support, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nf_queue: remove leftover synchronize_rcu, Florian Westphal
  • Re: [PATCH nf-next] netfilter: nf_queue: remove leftover synchronize_rcu, Pablo Neira Ayuso
• [libnetfilter_log PATCH] build: fix `--disable-static`, Jeremy Sowden
  • Re: [libnetfilter_log PATCH] build: fix `--disable-static`, Pablo Neira Ayuso
• [PATCH nft] Revert "configure: default to libedit for cli", Pablo Neira Ayuso
  • Re: [PATCH nft] Revert "configure: default to libedit for cli", Pablo Neira Ayuso
• [PATCH] netfilter: conntrack: Use memset_startat() to zero struct nf_conn, Kees Cook
  • Re: [PATCH] netfilter: conntrack: Use memset_startat() to zero struct nf_conn, Pablo Neira Ayuso
• [PATCH nft] configure: fall back to readline if libedit is not available, Pablo Neira Ayuso
• [PATCH nft,v2] cache: do not skip populating anonymous set with -t, Pablo Neira Ayuso
• [PATCH nft] cache: do not skip populating anonymous set with -t, Pablo Neira Ayuso
• [ANNOUNCE] nftables 1.0.1 release, Pablo Neira Ayuso
• [ANNOUNCE] libnftnl 1.2.1 release, Pablo Neira Ayuso
• [ANNOUNCE] libnetfilter_log 1.0.2 release, Pablo Neira Ayuso
• [PATCH nft] monitor: do not call interval_map_decompose() for concat intervals, Florian Westphal
  • Re: [PATCH nft] monitor: do not call interval_map_decompose() for concat intervals, Pablo Neira Ayuso
• [PATCH nf-next 0/2] netfilter: conntrack: speed up netns dismantle, Florian Westphal
  • [PATCH nf-next 1/2] netfilter: conntrack: split nf_conntrack_cleanup_net_list, Florian Westphal
  • [PATCH nf-next 2/2] netfilter: conntrack: speed up netns cleanup, Florian Westphal
• [PATCH nft] parser_json: add raw payload inner header match support, Pablo Neira Ayuso
• [PATCH libnftnl] expr: payload: print inner header base offset, Pablo Neira Ayuso
• Re: "AVX2-based lookup implementation" has broken ebtables --among-src, Stefano Brivio
  • Re: "AVX2-based lookup implementation" has broken ebtables --among-src, Florian Westphal
    • Re: "AVX2-based lookup implementation" has broken ebtables --among-src, Nikita Yushchenko
      • Re: "AVX2-based lookup implementation" has broken ebtables --among-src, Stefano Brivio
        • Re: "AVX2-based lookup implementation" has broken ebtables --among-src, Stefano Brivio
    • Re: "AVX2-based lookup implementation" has broken ebtables --among-src, Florian Westphal
• [PATCH nft] parser: allow for string raw payload base, Pablo Neira Ayuso
• [ulogd2 PATCH v4 00/15] Build Improvements, Jeremy Sowden
  • [ulogd2 PATCH v4 01/15] gitignore: add Emacs artefacts, Jeremy Sowden
  • [ulogd2 PATCH v4 02/15] gitignore: ignore .dirstamp, Jeremy Sowden
  • [ulogd2 PATCH v4 03/15] build: remove unused Makefile fragment, Jeremy Sowden
  • [ulogd2 PATCH v4 04/15] build: remove empty filter sub-directory, Jeremy Sowden
  • [ulogd2 PATCH v4 06/15] build: add Make_global.am for common flags, Jeremy Sowden
  • [ulogd2 PATCH v4 05/15] build: move CPP `-D` flag., Jeremy Sowden
  • [ulogd2 PATCH v4 09/15] build: group `*_la_*` variables with their libraries, Jeremy Sowden
  • [ulogd2 PATCH v4 08/15] build: skip sub-directories containing disabled plugins, Jeremy Sowden
  • [ulogd2 PATCH v4 07/15] build: use `dist_man_MANS` to declare man-pages, Jeremy Sowden
  • [ulogd2 PATCH v4 14/15] build: quote autoconf macro arguments, Jeremy Sowden
  • [ulogd2 PATCH v4 11/15] build: use correct automake variable for library dependencies, Jeremy Sowden
  • [ulogd2 PATCH v4 10/15] build: delete commented-out code, Jeremy Sowden
  • [ulogd2 PATCH v4 13/15] build: remove commented-out code, Jeremy Sowden
  • [ulogd2 PATCH v4 15/15] build: use `AS_IF` consistently in configure.ac, Jeremy Sowden
  • [ulogd2 PATCH v4 12/15] build: update obsolete autoconf macros, Jeremy Sowden
  • Re: [ulogd2 PATCH v4 00/15] Build Improvements, Pablo Neira Ayuso
    • Re: [ulogd2 PATCH v4 00/15] Build Improvements, Jeremy Sowden
• [ulogd2 PATCH v3 00/16] Build Improvements, Jeremy Sowden
  • [ulogd2 PATCH v3 06/16] build: add Make_global.am for common flags, Jeremy Sowden
  • [ulogd2 PATCH v3 03/16] build: remove unused Makefile fragment, Jeremy Sowden
  • [ulogd2 PATCH v3 07/16] build: use `dist_man_MANS` to declare man-pages, Jeremy Sowden
  • [ulogd2 PATCH v3 04/16] build: remove empty filter sub-directory, Jeremy Sowden
  • [ulogd2 PATCH v3 01/16] gitignore: add Emacs artefacts, Jeremy Sowden
  • [ulogd2 PATCH v3 08/16] build: skip sub-directories containing disabled plugins, Jeremy Sowden
  • [ulogd2 PATCH v3 09/16] build: group `*_la_*` variables with their libraries, Jeremy Sowden
  • [ulogd2 PATCH v3 05/16] build: move CPP `-D` flag., Jeremy Sowden
  • [ulogd2 PATCH v3 02/16] gitignore: ignore .dirstamp, Jeremy Sowden
  • [ulogd2 PATCH v3 14/16] build: remove unnecessary `AC_SUBST` calls, Jeremy Sowden
    • Re: [ulogd2 PATCH v3 14/16] build: remove unnecessary `AC_SUBST` calls, Jan Engelhardt
      • Re: [ulogd2 PATCH v3 14/16] build: remove unnecessary `AC_SUBST` calls, Jeremy Sowden
  • [ulogd2 PATCH v3 13/16] build: remove commented-out code, Jeremy Sowden
  • [ulogd2 PATCH v3 11/16] build: use correct automake variable for library dependencies, Jeremy Sowden
  • [ulogd2 PATCH v3 16/16] build: use `AS_IF` consistently in configure.ac, Jeremy Sowden
  • [ulogd2 PATCH v3 10/16] build: delete commented-out code, Jeremy Sowden
  • [ulogd2 PATCH v3 15/16] build: quote autoconf macro arguments, Jeremy Sowden
  • [ulogd2 PATCH v3 12/16] build: update obsolete autoconf macros, Jeremy Sowden
• [PATCH conntrack-tools 1/3] conntrack: pass filter_dump object to nfct_mnl_dump(), Pablo Neira Ayuso
  • [PATCH conntrack-tools 3/3] conntrack: use libmnl for listing conntrack table, Pablo Neira Ayuso
  • [PATCH conntrack-tools 2/3] conntrack: enhance mnl_nfct_dump_cb(), Pablo Neira Ayuso
• [PATCH libnetfilter_conntrack,v2] conntrack: add nfct_nlmsg_build_filter() helper, Pablo Neira Ayuso
• [PATCH libnetfilter_conntrack] conntrack: add nfct_nlmsg_build_filter() helper, Pablo Neira Ayuso
• redefining a variable, Matt Zagrabelny
  • Re: redefining a variable, Florian Westphal
    • Re: redefining a variable, Matt Zagrabelny
• [PATCH nft] tests: py: remove netdev coverage in ip/ip_tcp.t, Pablo Neira Ayuso
• [PATCH nft 1/3] tests: py: missing ip/dnat.t json updates, Pablo Neira Ayuso
  • [PATCH nft 3/3] tests: py: missing json output update in ip6/meta.t, Pablo Neira Ayuso
  • [PATCH nft 2/3] tests: py: missing ip/snat.t json updates, Pablo Neira Ayuso
• [PATCH nf] selftests: nft_nat: switch port shadow test cases to socat, Florian Westphal
  • Re: [PATCH nf] selftests: nft_nat: switch port shadow test cases to socat, Pablo Neira Ayuso
• [GIT PULL] Networking for 5.16-rc1, Jakub Kicinski
  • Re: [GIT PULL] Networking for 5.16-rc1, pr-tracker-bot
    • 32bit x86 build broken (was: Re: [GIT PULL] Networking for 5.16-rc1), Jakub Kicinski
      • Re: 32bit x86 build broken (was: Re: [GIT PULL] Networking for 5.16-rc1), YueHaibing
      • Re: 32bit x86 build broken (was: Re: [GIT PULL] Networking for 5.16-rc1), Linus Torvalds
        • Re: 32bit x86 build broken (was: Re: [GIT PULL] Networking for 5.16-rc1), Jakub Kicinski
          • Re: 32bit x86 build broken (was: Re: [GIT PULL] Networking for 5.16-rc1), Srinivas Pandruvada
            • Re: 32bit x86 build broken (was: Re: [GIT PULL] Networking for 5.16-rc1), Daniel Lezcano
            • Re: 32bit x86 build broken (was: Re: [GIT PULL] Networking for 5.16-rc1), Rafael J. Wysocki
        • Re: 32bit x86 build broken (was: Re: [GIT PULL] Networking for 5.16-rc1), Linus Torvalds
      • Re: 32bit x86 build broken (was: Re: [GIT PULL] Networking for 5.16-rc1), Srinivas Pandruvada
• [PATCH nft] cache: filter out rules by chain, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_fwd_netdev: Support egress hook, Lukas Wunner
  • Re: [PATCH nf-next] netfilter: nft_fwd_netdev: Support egress hook, Pablo Neira Ayuso
    • Re: [PATCH nf-next] netfilter: nft_fwd_netdev: Support egress hook, Pablo Neira Ayuso
• [PATCH nft,v5 3/3] cache: missing family in cache filtering, Pablo Neira Ayuso
• [PATCH nft,v4 1/3] cache: move list filter under struct, Pablo Neira Ayuso
  • [PATCH nft,v4 3/3] cache: missing family in cache filtering, Pablo Neira Ayuso
  • [PATCH nft,v4 2/3] cache: do not populate cache if it is going to be flushed, Pablo Neira Ayuso
• [PATCH nft 1/2] cache: move list filter under struct, Pablo Neira Ayuso
  • [PATCH nft,v3 2/2] cache: do not populate cache if it is going to be flushed, Pablo Neira Ayuso
• [PATCH nft,v2 1/2] cache: move list filter under struct, Pablo Neira Ayuso
  • [PATCH nft,v2 2/2] cache: do not populate cache if it is going to be flushed, Pablo Neira Ayuso
• [PATCH nft] cache: do not populate cache if it is going to be flushed, Pablo Neira Ayuso
• [iptables PATCH] extensions: hashlimit: Fix tests with HZ=1000, Phil Sutter
• libnftnl: guarantee a stable interface between minor updates ?, la Fleur
  • <Possible follow-ups>
  • libnftnl: guarantee a stable interface between minor updates ?, la Fleur
• [PATCH conntrack-tools] conntrackd: do not include conntrack ID in hashtable cmp, Pablo Neira Ayuso
• [PATCH] ipvs: remove unused variable for ip_vs_new_dest, GuoYong Zheng
  • Re: [PATCH] ipvs: remove unused variable for ip_vs_new_dest, Julian Anastasov
    • Re: [PATCH] ipvs: remove unused variable for ip_vs_new_dest, Simon Horman
      • Re: [PATCH] ipvs: remove unused variable for ip_vs_new_dest, zhenggy
      • Re: [PATCH] ipvs: remove unused variable for ip_vs_new_dest, Pablo Neira Ayuso
• [PATCH] netfilter: flowtable: fix IPv6 tunnel addr match, Will Mortensen
  • Re: [PATCH] netfilter: flowtable: fix IPv6 tunnel addr match, Pablo Neira Ayuso
• [iptables PATCH 00/10] Share more code with legacy, Phil Sutter
  • [iptables PATCH 10/10] xshared: Make load_proto() static, Phil Sutter
  • [iptables PATCH 05/10] xshared: Share save_ipv{4,6}_addr() with legacy, Phil Sutter
  • [iptables PATCH 08/10] xshared: Share print_header() with legacy iptables, Phil Sutter
  • [iptables PATCH 09/10] nft-shared: Drop unused function print_proto(), Phil Sutter
  • [iptables PATCH 04/10] xshared: Share save_rule_details() with legacy, Phil Sutter
  • [iptables PATCH 01/10] xshared: Merge and share parse_chain(), Phil Sutter
  • [iptables PATCH 03/10] xshared: Share print_iface() function, Phil Sutter
  • [iptables PATCH 07/10] xshared: Share print_fragment() with legacy, Phil Sutter
  • [iptables PATCH 06/10] xshared: Share print_rule_details() with legacy, Phil Sutter
  • [iptables PATCH 02/10] nft: Change whitespace printing in save_rule callback, Phil Sutter
• [iptables PATCH] xlate-test: Print full path if testing all files, Phil Sutter
  • Re: [iptables PATCH] xlate-test: Print full path if testing all files, Pablo Neira Ayuso
• [iptables PATCH] Unbreak xtables-translate, Phil Sutter
  • Re: [iptables PATCH] Unbreak xtables-translate, Jeremy Sowden
    • Re: [iptables PATCH] Unbreak xtables-translate, Jeremy Sowden
      • Re: [iptables PATCH] Unbreak xtables-translate, Phil Sutter
  • Re: [iptables PATCH] Unbreak xtables-translate, Pablo Neira Ayuso
• [ulogd2 PATCH v2 00/27] Compiler Warning Fixes, Jeremy Sowden
  • [ulogd2 PATCH v2 02/27] ulog: remove empty log-line, Jeremy Sowden
  • [ulogd2 PATCH v2 03/27] ulog: fix order of log arguments, Jeremy Sowden
  • [ulogd2 PATCH v2 04/27] ulog: correct log specifiers, Jeremy Sowden
  • [ulogd2 PATCH v2 05/27] output: IPFIX: correct format-specifiers, Jeremy Sowden
  • [ulogd2 PATCH v2 08/27] filter: HWHDR: replace `switch` with `if`, Jeremy Sowden
  • [ulogd2 PATCH v2 06/27] jhash: add "fall through" comments to switch cases, Jeremy Sowden
  • [ulogd2 PATCH v2 07/27] db: add missing `break` to switch-case, Jeremy Sowden
  • [ulogd2 PATCH v2 09/27] filter: HWHDR: re-order KEY_RAW_MAC checks, Jeremy Sowden
  • [ulogd2 PATCH v2 01/27] include: add format attribute to __ulogd_log declaration, Jeremy Sowden
  • [ulogd2 PATCH v2 10/27] filter: HWHDR: remove zero-initialization of MAC type, Jeremy Sowden
  • [ulogd2 PATCH v2 22/27] util: db: fix possible string truncation, Jeremy Sowden
  • [ulogd2 PATCH v2 12/27] filter: PWSNIFF: replace malloc+strncpy with strndup, Jeremy Sowden
  • [ulogd2 PATCH v2 26/27] output: JSON: fix possible truncation of socket path, Jeremy Sowden
  • [ulogd2 PATCH v2 15/27] input: UNIXSOCK: prevent unaligned pointer access, Jeremy Sowden
  • [ulogd2 PATCH v2 17/27] output: DBI: fix string truncation warnings, Jeremy Sowden
  • [ulogd2 PATCH v2 24/27] output: JSON: fix printf truncation warnings, Jeremy Sowden
  • [ulogd2 PATCH v2 19/27] output: PGSQL: Fix string truncation warning, Jeremy Sowden
  • [ulogd2 PATCH v2 23/27] output: JSON: fix output of GMT offset, Jeremy Sowden
  • [ulogd2 PATCH v2 27/27] output: IPFIX: remove attribute macros, Jeremy Sowden
  • [ulogd2 PATCH v2 16/27] output: DBI: fix deprecation warnings, Jeremy Sowden
  • [ulogd2 PATCH v2 21/27] output: SQLITE3: catch errors creating SQL statement, Jeremy Sowden
  • [ulogd2 PATCH v2 13/27] input: UNIXSOCK: remove stat of socket-path, Jeremy Sowden
  • [ulogd2 PATCH v2 11/27] Replace malloc+memset with calloc, Jeremy Sowden
  • [ulogd2 PATCH v2 14/27] input: UNIXSOCK: fix possible truncation of socket path, Jeremy Sowden
  • [ulogd2 PATCH v2 20/27] output: SQLITE3: Fix string truncation warnings and possible buffer overruns, Jeremy Sowden
  • [ulogd2 PATCH v2 18/27] output: MYSQL: Fix string truncation warning, Jeremy Sowden
  • [ulogd2 PATCH v2 25/27] output: JSON: optimize appending of newline to output, Jeremy Sowden
  • Re: [ulogd2 PATCH v2 00/27] Compiler Warning Fixes, Pablo Neira Ayuso
• [ulogd2 PATCH v2 00/13] Build Improvements, Jeremy Sowden
  • [ulogd2 PATCH v2 02/12] gitignore: ignore .dirstamp, Jeremy Sowden
  • [ulogd2 PATCH v2 01/12] gitignore: add Emacs artefacts, Jeremy Sowden
  • [ulogd2 PATCH v2 03/12] build: remove unused Makefile fragment, Jeremy Sowden
  • [ulogd2 PATCH v2 05/12] build: move cpp flag to the only Makefile.am file where it's needed, Jeremy Sowden
  • [ulogd2 PATCH v2 08/12] build: only conditionally enter sub-directories containing optional code, Jeremy Sowden
  • [ulogd2 PATCH v2 04/12] build: remove empty filter sub-directory, Jeremy Sowden
  • [ulogd2 PATCH v2 07/12] build: use `dist_man_MANS`, Jeremy Sowden
  • [ulogd2 PATCH v2 09/12] build: move library dependencies from LDFLAGS to LIBADD, Jeremy Sowden
  • [ulogd2 PATCH v2 06/12] build: add Make_global.am for common flags and include it where necessary, Jeremy Sowden
  • [ulogd2 PATCH v2 12/12] build: reformat autoconf AC_ARG_WITH, AC_ARG_ENABLE and related macros, Jeremy Sowden
  • [ulogd2 PATCH v2 10/12] build: update obsolete autoconf macros, Jeremy Sowden
  • [ulogd2 PATCH v2 11/12] build: quote and reformat some autoconf macro arguments, Jeremy Sowden
  • Re: [ulogd2 PATCH v2 00/13] Build Improvements, Pablo Neira Ayuso
    • Re: [ulogd2 PATCH v2 00/13] Build Improvements, Jeremy Sowden
• [PATCH nft] tests: py: update rawpayload.t.json, Pablo Neira Ayuso
• [PATCH nft 1/2] evaluate: clone variable expression if there is more than one reference, Pablo Neira Ayuso
  • [PATCH nft 2/2] evaluate: grab reference in set expression evaluation, Pablo Neira Ayuso
• [PATCH] netfilter: nft_payload: remove duplicate include in nft_payload.c, cgel . zte
• [PATCH nft 1/2] tests: py: remove verdict from closing end interval, Pablo Neira Ayuso
  • [PATCH nft 2/2] mnl: do not build nftnl_set element list, Pablo Neira Ayuso
• [PATCH libnftnl 1/2] set: expose nftnl_set_elem_nlmsg_build(), Pablo Neira Ayuso
  • [PATCH libnftnl 2/2] set: use NFTNL_SET_ELEM_VERDICT to print verdict, Pablo Neira Ayuso
• [PATCH] netfilter: xt_IDLETIMER: replace snprintf in show functions with sysfs_emit, cgel . zte
  • Re: [PATCH] netfilter: xt_IDLETIMER: replace snprintf in show functions with sysfs_emit, Pablo Neira Ayuso
    • [PATCH v2] scsi: snic: Replace snprintf in show functions with sysfs_emit, cgel . zte
• [PATCH nf-next v6] netfilter: ipvs: Fix reuse connection if RS weight is 0, yangxingwu
  • Re: [PATCH nf-next v6] netfilter: ipvs: Fix reuse connection if RS weight is 0, Simon Horman
    • Re: [PATCH nf-next v6] netfilter: ipvs: Fix reuse connection if RS weight is 0, Pablo Neira Ayuso
  • Re: [PATCH nf-next v6] netfilter: ipvs: Fix reuse connection if RS weight is 0, Julian Anastasov
• [PATCH nf] netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY, Florent Fourcot
  • [PATCH nf] netfilter: ctnetlink: do not erase error code with EINVAL, Florent Fourcot
    • Re: [PATCH nf] netfilter: ctnetlink: do not erase error code with EINVAL, Pablo Neira Ayuso
  • Re: [PATCH nf] netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY, Pablo Neira Ayuso
• [PATCH nft] src: raw payload match and mangle on inner header / payload data, Pablo Neira Ayuso
• [nf PATCH 0/2] Review port shadow selftest, Phil Sutter
  • [PATCH 2/2] selftests: nft_nat: Simplify port shadow notrack test, Phil Sutter
  • [PATCH 1/2] selftests: nft_nat: Improve port shadow test stability, Phil Sutter
  • Re: [nf PATCH 0/2] Review port shadow selftest, Pablo Neira Ayuso
• [PATCH net v2 RESEND] netfilter: fix conntrack flows stuck issue on cleanup., Volodymyr Mytnyk
  • Re: [PATCH net v2 RESEND] netfilter: fix conntrack flows stuck issue on cleanup., Pablo Neira Ayuso
    • Re: [PATCH net v2 RESEND] netfilter: fix conntrack flows stuck issue on cleanup., Volodymyr Mytnyk [C]
• [PATCH nft,v3] datatype: add xinteger_type alias to print in hexadecimal, Pablo Neira Ayuso
• [PATCH nft,v2] datatype: add xinteger_type alias to print in hexadecimal, Pablo Neira Ayuso
• [nft PATCH] tests: shell: Fix bogus testsuite failure with 250Hz, Phil Sutter
  • Re: [nft PATCH] tests: shell: Fix bogus testsuite failure with 250Hz, Pablo Neira Ayuso
  • Re: [nft PATCH] tests: shell: Fix bogus testsuite failure with 250Hz, Lukas Wunner
• Potential problem with VRF+conntrack after kernel upgrade, Arturo Borrero Gonzalez
  • Re: Potential problem with VRF+conntrack after kernel upgrade, Florian Westphal
    • Re: Potential problem with VRF+conntrack after kernel upgrade, Greg KH
• [PATCH nft] datatype: add xinteger_type alias to print in hexadecimal, Pablo Neira Ayuso
• [PATCH nft] evaluate: postpone transport protocol match check after nat expression evaluation, Pablo Neira Ayuso
• [PATCH] netfilter: nft_payload: Remove duplicated include in nft_payload.c, Wan Jiabing
  • Re: [PATCH] netfilter: nft_payload: Remove duplicated include in nft_payload.c, Pablo Neira Ayuso
• [PATCH net 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH net 1/2] netfilter: nfnetlink_queue: fix OOB when mac header was cleared, Pablo Neira Ayuso
    • Re: [PATCH net 1/2] netfilter: nfnetlink_queue: fix OOB when mac header was cleared, patchwork-bot+netdevbpf
  • [PATCH net 2/2] ipvs: autoload ipvs on genl access, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
    • [PATCH net 1/2] ipvs: Fix checksumming on GSO of SCTP packets, Pablo Neira Ayuso
      • Re: [PATCH net 1/2] ipvs: Fix checksumming on GSO of SCTP packets, patchwork-bot+netdevbpf
    • [PATCH net 2/2] netfilter: nf_tables: honor table dormant flag from netdev release event path, Pablo Neira Ayuso
  • [PATCH net 0/2] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
    • [PATCH net 2/2] netfilter: ipset: Fix for recursive locking warning, Pablo Neira Ayuso
    • [PATCH net 1/2] ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems, Pablo Neira Ayuso
      • Re: [PATCH net 1/2] ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems, patchwork-bot+netdevbpf
• [PATCH net-next 0/5] Netfilter updates for net-next, Pablo Neira Ayuso
  • [PATCH net-next 1/5] netfilter: ebtables: use array_size() helper in copy_{from,to}_user(), Pablo Neira Ayuso
    • Re: [PATCH net-next 1/5] netfilter: ebtables: use array_size() helper in copy_{from,to}_user(), patchwork-bot+netdevbpf
  • [PATCH net-next 2/5] netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state, Pablo Neira Ayuso
  • [PATCH net-next 5/5] netfilter: nft_payload: support for inner header matching / mangling, Pablo Neira Ayuso
  • [PATCH net-next 3/5] netfilter: nft_meta: add NFT_META_IFTYPE, Pablo Neira Ayuso
  • [PATCH net-next 4/5] netfilter: nf_tables: convert pktinfo->tprot_set to flags field, Pablo Neira Ayuso
  • <Possible follow-ups>
  • [PATCH net-next 0/5] netfilter updates for net-next, Florian Westphal
    • [PATCH net-next 1/5] netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs, Florian Westphal
      • Re: [PATCH net-next 1/5] netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs, patchwork-bot+netdevbpf
    • [PATCH net-next 2/5] netfilter: nft_masq: deduplicate eval call-backs, Florian Westphal
    • [PATCH net-next 3/5] netfilter: xtables: disable 32bit compat interface by default, Florian Westphal
    • [PATCH net-next 4/5] xtables: move icmp/icmpv6 logic to xt_tcpudp, Florian Westphal
    • [PATCH net-next 5/5] netfilter: keep conntrack reference until IPsecv6 policy checks are done, Florian Westphal
  • [PATCH net-next 0/5] netfilter updates for net-next, Florian Westphal
    • [PATCH net-next 1/5] nf_conntrack: fix -Wunused-const-variable=, Florian Westphal
      • Re: [PATCH net-next 1/5] nf_conntrack: fix -Wunused-const-variable=, Jakub Kicinski
        • Re: [PATCH net-next 1/5] nf_conntrack: fix -Wunused-const-variable=, Jakub Kicinski
      • Re: [PATCH net-next 1/5] nf_conntrack: fix -Wunused-const-variable=, patchwork-bot+netdevbpf
    • [PATCH net-next 2/5] netlink: allow be16 and be32 types in all uint policy checks, Florian Westphal
    • [PATCH net-next 3/5] netfilter: nf_tables: use NLA_POLICY_MASK to test for valid flag options, Florian Westphal
    • [PATCH net-next 4/5] netfilter: conntrack: validate cta_ip via parsing, Florian Westphal
    • [PATCH net-next 5/5] lib/ts_bm: add helper to reduce indentation and improve readability, Florian Westphal
  • [PATCH net-next 0/5] netfilter updates for net-next, Florian Westphal
    • [PATCH next-next 4/5] netfilter: h323: Remove unused function declarations, Florian Westphal
    • [PATCH next-next 2/5] netfilter: helper: Remove unused function declarations, Florian Westphal
    • [PATCH next-next 5/5] netfilter: nfnetlink_log: always add a timestamp, Florian Westphal
    • [PATCH next-next 3/5] netfilter: conntrack: Remove unused function declarations, Florian Westphal
    • [PATCH next-next 1/5] netfilter: gre: Remove unused function declaration nf_ct_gre_keymap_flush(), Florian Westphal
      • Re: [PATCH next-next 1/5] netfilter: gre: Remove unused function declaration nf_ct_gre_keymap_flush(), patchwork-bot+netdevbpf
• [PATCH nf-next v5] netfilter: ipvs: Fix reuse connection if RS weight is 0, yangxingwu
  • Re: [PATCH nf-next v5] netfilter: ipvs: Fix reuse connection if RS weight is 0, Julian Anastasov
    • Re: [PATCH nf-next v5] netfilter: ipvs: Fix reuse connection if RS weight is 0, yangxingwu
    • Message not available
      • Re: [PATCH nf-next v5] netfilter: ipvs: Fix reuse connection if RS weight is 0, Simon Horman
  • Re: [PATCH nf-next v5] netfilter: ipvs: Fix reuse connection if RS weight is 0, Simon Horman
• [ulogd2 PATCH 00/26] Compiler Warning Fixes, Jeremy Sowden
  • [ulogd2 PATCH 03/26] ulog: fix order of log arguments, Jeremy Sowden
  • [ulogd2 PATCH 01/26] include: add format attribute to __ulogd_log declaration, Jeremy Sowden
  • [ulogd2 PATCH 02/26] ulog: remove empty log-line, Jeremy Sowden
  • [ulogd2 PATCH 04/26] ulog: correct log specifiers, Jeremy Sowden
  • [ulogd2 PATCH 05/26] output: IPFIX: correct format-specifiers., Jeremy Sowden
  • [ulogd2 PATCH 08/26] filter: HWHDR: replace `switch` with `if`., Jeremy Sowden
  • [ulogd2 PATCH 09/26] filter: HWHDR: re-order KEY_RAW_MAC checks., Jeremy Sowden
  • [ulogd2 PATCH 07/26] db: add missing `break` to switch-case., Jeremy Sowden
  • [ulogd2 PATCH 06/26] jhash: add "fall through" comments to switch cases., Jeremy Sowden
  • [ulogd2 PATCH 25/26] output: JSON: optimize appending of newline to output., Jeremy Sowden
  • [ulogd2 PATCH 26/26] output: JSON: fix possible truncation of socket path, Jeremy Sowden
  • [ulogd2 PATCH 19/26] output: PGSQL: Fix string truncation warning, Jeremy Sowden
  • [ulogd2 PATCH 11/26] Replace malloc+memset with calloc, Jeremy Sowden
  • [ulogd2 PATCH 15/26] input: UNIXSOCK: prevent unaligned pointer access., Jeremy Sowden
    • Re: [ulogd2 PATCH 15/26] input: UNIXSOCK: prevent unaligned pointer access., Jan Engelhardt
      • Re: [ulogd2 PATCH 15/26] input: UNIXSOCK: prevent unaligned pointer access., Jeremy Sowden
  • [ulogd2 PATCH 17/26] output: DBI: fix string truncation warnings, Jeremy Sowden
  • [ulogd2 PATCH 12/26] filter: PWSNIFF: replace malloc+strncpy with strndup., Jeremy Sowden
  • [ulogd2 PATCH 22/26] util: db: fix possible string truncation., Jeremy Sowden
  • [ulogd2 PATCH 14/26] input: UNIXSOCK: fix possible truncation of socket path, Jeremy Sowden
  • [ulogd2 PATCH 13/26] input: UNIXSOCK: stat socket-path first before creating the socket., Jeremy Sowden
    • Re: [ulogd2 PATCH 13/26] input: UNIXSOCK: stat socket-path first before creating the socket., Jan Engelhardt
      • Re: [ulogd2 PATCH 13/26] input: UNIXSOCK: stat socket-path first before creating the socket., Jeremy Sowden
  • [ulogd2 PATCH 18/26] output: MYSQL: Fix string truncation warning, Jeremy Sowden
  • [ulogd2 PATCH 24/26] output: JSON: fix printf truncation warnings., Jeremy Sowden
  • [ulogd2 PATCH 20/26] output: SQLITE3: Fix string truncation warnings and possible buffer overruns., Jeremy Sowden
  • [ulogd2 PATCH 10/26] filter: HWHDR: remove zero-initialization of MAC type., Jeremy Sowden
  • [ulogd2 PATCH 23/26] output: JSON: fix output of GMT offset., Jeremy Sowden
  • [ulogd2 PATCH 21/26] output: SQLITE3: catch errors creating SQL statement, Jeremy Sowden
  • [ulogd2 PATCH 16/26] output: DBI: fix deprecation warnings., Jeremy Sowden
• [ulogd2 PATCH 00/13] Build Improvements, Jeremy Sowden
  • [ulogd2 PATCH 08/13] build: only conditionally enter sub-directories containing optional code, Jeremy Sowden
    • Re: [ulogd2 PATCH 08/13] build: only conditionally enter sub-directories containing optional code, Jan Engelhardt
      • Re: [ulogd2 PATCH 08/13] build: only conditionally enter sub-directories containing optional code, Jeremy Sowden
  • [ulogd2 PATCH 07/13] build: use `dist_man_MANS`, Jeremy Sowden
  • [ulogd2 PATCH 05/13] build: move cpp flag to the only Makefile.am file where it's needed, Jeremy Sowden
  • [ulogd2 PATCH 06/13] build: add Make_global.am for common flags and include it where necessary, Jeremy Sowden
  • [ulogd2 PATCH 01/13] gitignore: Add Emacs artefacts, Jeremy Sowden
  • [ulogd2 PATCH 04/13] build: remove empty filter sub-directory, Jeremy Sowden
  • [ulogd2 PATCH 03/13] build: remove unused Makefile fragment, Jeremy Sowden
  • [ulogd2 PATCH 02/13] gitignore: ignore util/.dirstamp, Jeremy Sowden
    • Re: [ulogd2 PATCH 02/13] gitignore: ignore util/.dirstamp, Jan Engelhardt
      • Re: [ulogd2 PATCH 02/13] gitignore: ignore util/.dirstamp, Jeremy Sowden
  • [ulogd2 PATCH 09/13] build: move library dependencies from LDFLAGS to LIBADD, Jeremy Sowden
  • [ulogd2 PATCH 10/13] build: update obsolete autoconf macros, Jeremy Sowden
    • Re: [ulogd2 PATCH 10/13] build: update obsolete autoconf macros, Jan Engelhardt
      • Re: [ulogd2 PATCH 10/13] build: update obsolete autoconf macros, Jeremy Sowden
  • [ulogd2 PATCH 13/13] build: bump autoconf version to 2.71, Jeremy Sowden
    • Re: [ulogd2 PATCH 13/13] build: bump autoconf version to 2.71, Jan Engelhardt
      • Re: [ulogd2 PATCH 13/13] build: bump autoconf version to 2.71, Jeremy Sowden
  • [ulogd2 PATCH 12/13] build: reformat autoconf AC_ARG_WITH, AC_ARG_ENABLE and related macros, Jeremy Sowden
  • [ulogd2 PATCH 11/13] build: quote and reformat some autoconf macro arguments, Jeremy Sowden
• [PATCH RFC bpf-next v1 0/6] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
  • [PATCH RFC bpf-next v1 1/6] bpf: Refactor bpf_check_mod_kfunc_call, Kumar Kartikeya Dwivedi
  • [PATCH RFC bpf-next v1 2/6] bpf: Remove DEFINE_KFUNC_BTF_ID_SET, Kumar Kartikeya Dwivedi
  • [PATCH RFC bpf-next v1 3/6] bpf: Extend kfunc with PTR_TO_CTX and PTR_TO_MEM arguments, Kumar Kartikeya Dwivedi
  • [PATCH RFC bpf-next v1 4/6] bpf: Add reference tracking support to kfunc returned PTR_TO_BTF_ID, Kumar Kartikeya Dwivedi
  • [PATCH RFC bpf-next v1 5/6] net: netfilter: Add unstable CT lookup helper for XDP and TC-BPF, Kumar Kartikeya Dwivedi
    • Re: [PATCH RFC bpf-next v1 5/6] net: netfilter: Add unstable CT lookup helper for XDP and TC-BPF, Florian Westphal
      • Re: [PATCH RFC bpf-next v1 5/6] net: netfilter: Add unstable CT lookup helper for XDP and TC-BPF, Toke Høiland-Jørgensen
        • Re: [PATCH RFC bpf-next v1 5/6] net: netfilter: Add unstable CT lookup helper for XDP and TC-BPF, Florian Westphal
          • Re: [PATCH RFC bpf-next v1 5/6] net: netfilter: Add unstable CT lookup helper for XDP and TC-BPF, Kumar Kartikeya Dwivedi
      • Re: [PATCH RFC bpf-next v1 5/6] net: netfilter: Add unstable CT lookup helper for XDP and TC-BPF, Alexei Starovoitov
  • [PATCH RFC bpf-next v1 6/6] selftests/bpf: Add referenced PTR_TO_BTF_ID selftest, Kumar Kartikeya Dwivedi
  • Re: [PATCH RFC bpf-next v1 0/6] Introduce unstable CT lookup helpers, Alexei Starovoitov
    • Re: [PATCH RFC bpf-next v1 0/6] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
      • Re: [PATCH RFC bpf-next v1 0/6] Introduce unstable CT lookup helpers, Alexei Starovoitov
        • Re: [PATCH RFC bpf-next v1 0/6] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
          • Re: [PATCH RFC bpf-next v1 0/6] Introduce unstable CT lookup helpers, Alexei Starovoitov
            • Re: [PATCH RFC bpf-next v1 0/6] Introduce unstable CT lookup helpers, Kumar Kartikeya Dwivedi
• [libnetfilter_log PATCH] build: fix pkg-config syntax-errors, Jeremy Sowden
  • Re: [libnetfilter_log PATCH] build: fix pkg-config syntax-errors, Pablo Neira Ayuso
• [PATCH nf-next v4] netfilter: ipvs: Fix reuse connection if RS weight is 0, yangxingwu
  • Re: [PATCH nf-next v4] netfilter: ipvs: Fix reuse connection if RS weight is 0, Julian Anastasov
    • Re: [PATCH nf-next v4] netfilter: ipvs: Fix reuse connection if RS weight is 0, Julian Anastasov
      • Re: [PATCH nf-next v4] netfilter: ipvs: Fix reuse connection if RS weight is 0, yangxingwu
• [PATCH net-next v3] ipvs: Fix reuse connection if RS weight is 0, yangxingwu
• [nft PATCH v2 0/3] parser: refactor and extend limit rate rules, Jeremy Sowden
  • [nft PATCH v2 1/3] parser: add new `limit_bytes` rule, Jeremy Sowden
  • [nft PATCH v2 2/3] parser: add `limit_rate_pkts` and `limit_rate_bytes` rules, Jeremy Sowden
  • [nft PATCH v2 3/3] parser: extend limit syntax, Jeremy Sowden
  • Re: [nft PATCH v2 0/3] parser: refactor and extend limit rate rules, Pablo Neira Ayuso
• [RFC] netfilter: ipset: fix AHASH_MAX_SIZE to documented one, Thomas Lamprecht
• [PATCH nf-next,v4 2/2] netfilter: nft_payload: support for inner header matching / mangling, Pablo Neira Ayuso
• [PACH nf-next,v4] netfilter: nft_payload: support for inner header matching / mangling, Pablo Neira Ayuso
• [PATCH nf-next,v3 2/2] netfilter: nft_payload: support for inner header matching / mangling, Pablo Neira Ayuso
• [PATCH v2] ipvs: Fix reuse connection if RS weight is 0, yangxingwu
  • Re: [PATCH v2] ipvs: Fix reuse connection if RS weight is 0, Julian Anastasov
    • Re: [PATCH v2] ipvs: Fix reuse connection if RS weight is 0, yangxingwu
• [PATCH nf-next 1/2,v2] netfilter: nf_tables: convert pktinfo->tprot_set to flags field, Pablo Neira Ayuso
  • [PATCH nf-next 2/2,v2] netfilter: nft_payload: support for inner header matching / mangling, Pablo Neira Ayuso
• [PATCH nft] doc: update ct timeout section with the state names, Florian Westphal
  • Re: [PATCH nft] doc: update ct timeout section with the state names, Pablo Neira Ayuso
• [PATCH nf-next,v1] netfilter: nft_payload: support for inner header matching / mangling, Pablo Neira Ayuso
• [PATCH nft] cache: disable NFT_CACHE_SETELEM_BIT on --terse listing only, Pablo Neira Ayuso
• nft terse set listing issue: netlink: Error: Unknown set in lookup expression, Chris Arges
  • Re: nft terse set listing issue: netlink: Error: Unknown set in lookup expression, Pablo Neira Ayuso
• Re: capwap protocol nested header, Duncan Roe
• [PATCH nft] cache: ensure evaluate_cache_list flags are set correctly, Chris Arges
  • Re: [PATCH nft] cache: ensure evaluate_cache_list flags are set correctly, Pablo Neira Ayuso
• [PATCH nf-next] netfilter: nft_meta: infer ptktype from IP address from the output path, Pablo Neira Ayuso
• [PATCH net-next] ifb: Depend on netfilter alternatively to tc, Lukas Wunner
  • Re: [PATCH net-next] ifb: Depend on netfilter alternatively to tc, patchwork-bot+netdevbpf
• [PATCH nft 1/4] configure: default to libedit for cli, Pablo Neira Ayuso
  • [PATCH nft 2/4] cache: always set on NFT_CACHE_REFRESH for listing, Pablo Neira Ayuso
  • [PATCH nft 3/4] cache: honor filter in set listing commands, Pablo Neira Ayuso
  • [PATCH nft 4/4] cache: honor table in set filtering, Pablo Neira Ayuso
• [PATCH v2 net-next 0/2] vrf: rework interaction with netfilter/conntrack, Florian Westphal
  • [PATCH v2 net-next 1/2] netfilter: conntrack: skip confirmation and nat hooks in postrouting for vrf, Florian Westphal
  • [PATCH v2 net-next 2/2] vrf: run conntrack only in context of lower/physdev for locally generated packets, Florian Westphal
    • Re: [PATCH v2 net-next 2/2] vrf: run conntrack only in context of lower/physdev for locally generated packets, David Ahern
    • Re: [PATCH v2 net-next 2/2] vrf: run conntrack only in context of lower/physdev for locally generated packets, Pablo Neira Ayuso
      • Re: [PATCH v2 net-next 2/2] vrf: run conntrack only in context of lower/physdev for locally generated packets, Florian Westphal
        • Re: [PATCH v2 net-next 2/2] vrf: run conntrack only in context of lower/physdev for locally generated packets, Pablo Neira Ayuso
  • Re: [PATCH v2 net-next 0/2] vrf: rework interaction with netfilter/conntrack, patchwork-bot+netdevbpf
• [PATCH nf-next] netfilter: nft_meta: add NFT_META_IFTYPE, Pablo Neira Ayuso
• [PATCH] ipvs: Fix reuse connection if RS weight is 0, yangxingwu
  • Re: [PATCH] ipvs: Fix reuse connection if RS weight is 0, Julian Anastasov
    • Re: [PATCH] ipvs: Fix reuse connection if RS weight is 0, yangxingwu
      • Re: [PATCH] ipvs: Fix reuse connection if RS weight is 0, Julian Anastasov
        • Re: [PATCH] ipvs: Fix reuse connection if RS weight is 0, yangxingwu
          • Re: [PATCH] ipvs: Fix reuse connection if RS weight is 0, yangxingwu
            • Re: [PATCH] ipvs: Fix reuse connection if RS weight is 0, Julian Anastasov
              • Re: [PATCH] ipvs: Fix reuse connection if RS weight is 0, yangxingwu
• [PATCH nf-next] netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state, Pablo Neira Ayuso
• Re: [syzbot] WARNING in port100_send_frame_async/usb_submit_urb, syzbot
• [PATCH nft] tests: shell: $NFT needs to be invoked unquoted, Štěpán Němec
  • Re: [PATCH nft] tests: shell: $NFT needs to be invoked unquoted, Pablo Neira Ayuso
    • Re: [PATCH nft] tests: shell: $NFT needs to be invoked unquoted, Štěpán Němec
• [PATCH net-next 0/2] vrf: rework interaction with netfilter/conntrack, Florian Westphal
  • [PATCH net-next 1/2] netfilter: conntrack: skip confirmation and nat hooks in postrouting for vrf, Florian Westphal
  • [PATCH net-next 2/2] vrf: run conntrack only in context of lower/physdev for locally generated packets, Florian Westphal
    • Re: [PATCH net-next 2/2] vrf: run conntrack only in context of lower/physdev for locally generated packets, Jakub Kicinski
    • Re: [PATCH net-next 2/2] vrf: run conntrack only in context of lower/physdev for locally generated packets, Eugene Crosser
      • Re: [PATCH net-next 2/2] vrf: run conntrack only in context of lower/physdev for locally generated packets, Florian Westphal
        • Re: [PATCH net-next 2/2] vrf: run conntrack only in context of lower/physdev for locally generated packets, Florian Westphal
• [PATCH] ipvs: autoload ipvs on genl access, Thomas Weißschuh
  • Re: [PATCH] ipvs: autoload ipvs on genl access, Julian Anastasov
    • Re: [PATCH] ipvs: autoload ipvs on genl access, Simon Horman
  • Re: [PATCH] ipvs: autoload ipvs on genl access, Pablo Neira Ayuso
• [PATCH net 0/8] Netfilter/IPVS fixes for net, Pablo Neira Ayuso
  • [PATCH net 2/8] netfilter: Kconfig: use 'default y' instead of 'm' for bool config option, Pablo Neira Ayuso
  • [PATCH net 1/8] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value, Pablo Neira Ayuso
    • Re: [PATCH net 1/8] netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value, patchwork-bot+netdevbpf
  • [PATCH net 3/8] netfilter: nf_tables: skip netdev events generated on netns removal, Pablo Neira Ayuso
  • [PATCH net 4/8] selftests: nft_nat: add udp hole punch test case, Pablo Neira Ayuso
  • [PATCH net 6/8] netfilter: ipvs: make global sysctl readonly in non-init netns, Pablo Neira Ayuso
  • [PATCH net 5/8] netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6, Pablo Neira Ayuso
  • [PATCH net 7/8] selftests: netfilter: remove stray bash debug line, Pablo Neira Ayuso
  • [PATCH net 8/8] netfilter: ebtables: allocate chainstack on CPU local nodes, Pablo Neira Ayuso
• [PATCH nf] selftests: netfilter: extend nfqueue tests to cover vrf device, Florian Westphal
  • Re: [PATCH nf] selftests: netfilter: extend nfqueue tests to cover vrf device, Pablo Neira Ayuso
• [PATCH nf] netfilter: nfnetlink_queue: fix OOB when mac header was cleared, Florian Westphal
  • Re: [PATCH nf] netfilter: nfnetlink_queue: fix OOB when mac header was cleared, Pablo Neira Ayuso
• [PATCH nft 1/3] tests: shell: README: copy edit, Štěpán Němec
  • [PATCH nft 2/3] tests: shell: README: $NFT does not have to be a path to a binary, Štěpán Němec
  • [PATCH nft 3/3] tests: shell: README: clarify test file name convention, Štěpán Němec
  • Re: [PATCH nft 1/3] tests: shell: README: copy edit, Phil Sutter
    • Re: [PATCH nft 1/3] tests: shell: README: copy edit, Štěpán Němec
      • Re: [PATCH nft 1/3] tests: shell: README: copy edit, Phil Sutter
        • Re: [PATCH nft 1/3] tests: shell: README: copy edit, Štěpán Němec
          • Re: [PATCH nft 1/3] tests: shell: README: copy edit, Pablo Neira Ayuso
            • Re: [PATCH nft 1/3] tests: shell: README: copy edit, Štěpán Němec
              • Re: [PATCH nft 1/3] tests: shell: README: copy edit, Pablo Neira Ayuso
                • Re: [PATCH nft 1/3] tests: shell: README: copy edit, Štěpán Němec
                  • Re: [PATCH nft 1/3] tests: shell: README: copy edit, Pablo Neira Ayuso
                    • [PATCH nft v2 1/4] tests: shell: README: copy edit, Štěpán Němec
                      • [PATCH nft v2 2/4] tests: shell: README: $NFT does not have to be a path to a binary, Štěpán Němec
                      • [PATCH nft v2 3/4] tests: shell: README: clarify test file name convention, Štěpán Němec
                      • [PATCH nft v2 4/4] tests: shell: $NFT needs to be invoked unquoted, Štěpán Němec
                      • Re: [PATCH nft v2 1/4] tests: shell: README: copy edit, Phil Sutter
• [PATCH nft] tests: run-tests.sh: ensure non-zero exit when $failed != 0, Štěpán Němec
  • Re: [PATCH nft] tests: run-tests.sh: ensure non-zero exit when $failed != 0, Phil Sutter
    • Re: [PATCH nft] tests: run-tests.sh: ensure non-zero exit when $failed != 0, Pablo Neira Ayuso
      • Re: [PATCH nft] tests: run-tests.sh: ensure non-zero exit when $failed != 0, Phil Sutter
        • Re: [PATCH nft] tests: run-tests.sh: ensure non-zero exit when $failed != 0, Pablo Neira Ayuso
          • Re: [PATCH nft] tests: run-tests.sh: ensure non-zero exit when $failed != 0, Phil Sutter
• [PATCH nft] tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set"), Štěpán Němec
  • Re: [PATCH nft] tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set"), Phil Sutter
    • Re: [PATCH nft] tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set"), Štěpán Němec
      • Re: [PATCH nft] tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set"), Phil Sutter
• [PATCH net] vrf: Revert "Reset skb conntrack connection...", Eugene Crosser
  • [PATCH net 1/1] vrf: Revert "Reset skb conntrack connection...", Eugene Crosser
    • Re: [PATCH net 1/1] vrf: Revert "Reset skb conntrack connection...", David Ahern
    • Re: [PATCH net 1/1] vrf: Revert "Reset skb conntrack connection...", Florian Westphal
• [PATCH nf] selftests: netfilter: add a vrf+conntrack testcase, Florian Westphal
  • Re: [PATCH nf] selftests: netfilter: add a vrf+conntrack testcase, Pablo Neira Ayuso
• [PATCH libnetfilter_queue v6] build: doc: Allow to specify whether to produce man pages, html, neither or both, Duncan Roe
  • Re: [PATCH libnetfilter_queue v6] build: doc: Allow to specify whether to produce man pages, html, neither or both, Pablo Neira Ayuso
• [PATCH libnetfilter_queue] build: doc: Ensure clean `git status` after in_tree build, Duncan Roe
• [PATCH nf-next 00/15] Netfilter/IPVS updates for net-next, Pablo Neira Ayuso
  • [PATCH nf-next 01/15] ipvs: add sysctl_run_estimation to support disable estimation, Pablo Neira Ayuso
  • [PATCH nf-next 02/15] netfilter: nft_dynset: relax superfluous check on set updates, Pablo Neira Ayuso
  • [PATCH nf-next 04/15] netfilter: Generalize ingress hook include file, Pablo Neira Ayuso
  • [PATCH nf-next 03/15] netfilter: Rename ingress hook include file, Pablo Neira Ayuso
  • [PATCH nf-next 05/15] netfilter: Introduce egress hook, Pablo Neira Ayuso
  • [PATCH nf-next 07/15] netfilter: iptables: allow use of ipt_do_table as hookfn, Pablo Neira Ayuso
  • [PATCH nf-next 06/15] af_packet: Introduce egress hook, Pablo Neira Ayuso
  • [PATCH nf-next 08/15] netfilter: arp_tables: allow use of arpt_do_table as hookfn, Pablo Neira Ayuso
  • [PATCH nf-next 11/15] netfilter: ipvs: prepare for hook function reduction, Pablo Neira Ayuso
  • [PATCH nf-next 09/15] netfilter: ip6tables: allow use of ip6t_do_table as hookfn, Pablo Neira Ayuso
  • [PATCH nf-next 10/15] netfilter: ebtables: allow use of ebt_do_table as hookfn, Pablo Neira Ayuso
  • [PATCH nf-next 14/15] netfilter: ipvs: merge ipv4 + ipv6 icmp reply handlers, Pablo Neira Ayuso
  • [PATCH nf-next 12/15] netfilter: ipvs: remove unneeded output wrappers, Pablo Neira Ayuso
  • [PATCH nf-next 13/15] netfilter: ipvs: remove unneeded input wrappers, Pablo Neira Ayuso
  • [PATCH nf-next 15/15] netfilter: core: Fix clang warnings about unused static inlines, Pablo Neira Ayuso
• [PATCH libnetfilter_log v5 1/1] build: doc: `make` generates requested documentation, Duncan Roe
  • Re: [PATCH libnetfilter_log v5 1/1] build: doc: `make` generates requested documentation, Pablo Neira Ayuso
• [PATCH nft] main: _exit() if setuid, Florian Westphal
  • Re: [PATCH nft] main: _exit() if setuid, Pablo Neira Ayuso
    • Re: [PATCH nft] main: _exit() if setuid, Florian Westphal
      • Re: [PATCH nft] main: _exit() if setuid, Pablo Neira Ayuso
• [PATCH v3 net-next] net: make use of helper netif_is_bridge_master(), Kyungrok Chung
  • Re: [PATCH v3 net-next] net: make use of helper netif_is_bridge_master(), Nikolay Aleksandrov
  • Re: [PATCH v3 net-next] net: make use of helper netif_is_bridge_master(), patchwork-bot+netdevbpf
• [PATCH net-next 0/9] Try to simplify the gnet_stats and remove qdisc->running sequence counter., Sebastian Andrzej Siewior
  • [PATCH net-next 2/9] gen_stats: Add gnet_stats_add_queue()., Sebastian Andrzej Siewior
  • [PATCH net-next 4/9] gen_stats: Move remaining users to gnet_stats_add_queue()., Sebastian Andrzej Siewior
  • [PATCH net-next 1/9] gen_stats: Add instead Set the value in __gnet_stats_copy_basic()., Sebastian Andrzej Siewior
  • [PATCH net-next 5/9] u64_stats: Introduce u64_stats_set(), Sebastian Andrzej Siewior
  • [PATCH net-next 3/9] mq, mqprio: Use gnet_stats_add_queue()., Sebastian Andrzej Siewior
  • [PATCH net-next 7/9] net: sched: Use _bstats_update/set() instead of raw writes, Sebastian Andrzej Siewior
  • [PATCH net-next 8/9] net: sched: Merge Qdisc::bstats and Qdisc::cpu_bstats data types, Sebastian Andrzej Siewior
  • [PATCH net-next 9/9] net: sched: Remove Qdisc::running sequence counter, Sebastian Andrzej Siewior
    • Re: [PATCH net-next 9/9] net: sched: Remove Qdisc::running sequence counter, Eric Dumazet
      • Re: [PATCH net-next 9/9] net: sched: Remove Qdisc::running sequence counter, Eric Dumazet
        • Re: [PATCH net-next 9/9] net: sched: Remove Qdisc::running sequence counter, Eric Dumazet
        • Re: [PATCH net-next 9/9] net: sched: Remove Qdisc::running sequence counter, Eric Dumazet
      • [PATCH net-next] net: sched: Allow statistics reads from softirq., Sebastian Andrzej Siewior
        • Re: [PATCH net-next] net: sched: Allow statistics reads from softirq., patchwork-bot+netdevbpf
  • [PATCH net-next 6/9] net: sched: Protect Qdisc::bstats with u64_stats, Sebastian Andrzej Siewior
• [PATCH nf-next] netfilter: core: Fix clang warnings about unused static inlines, Lukas Wunner
  • Re: [PATCH nf-next] netfilter: core: Fix clang warnings about unused static inlines, Pablo Neira Ayuso
• [PATCH libnetfilter_queue v5] build: doc: Allow to specify whether to produce man pages, html, neither or both, Duncan Roe
• [PATCH v2 net-next] net: make use of helper netif_is_bridge_master(), Kyungrok Chung
  • Re: [PATCH v2 net-next] net: make use of helper netif_is_bridge_master(), Nikolay Aleksandrov
• [PATCH libnetfilter_log v5] build: doc: Allow to specify whether to produce man pages, html, neither or both, Duncan Roe
  • Re: [PATCH libnetfilter_log v5] build: doc: Allow to specify whether to produce man pages, html, neither or both, Duncan Roe
    • You dropped the wrong patvh from patchwork, Duncan Roe
      • Re: You dropped the wrong patvh from patchwork, Pablo Neira Ayuso
        • Re: You dropped the wrong patvh from patchwork, Pablo Neira Ayuso
        • Re: You dropped the wrong patvh from patchwork, Duncan Roe
          • Re: You dropped the wrong patvh from patchwork, Duncan Roe
  • Re: [PATCH libnetfilter_log v5] build: doc: Allow to specify whether to produce man pages, html, neither or both, Pablo Neira Ayuso
    • Re: [PATCH libnetfilter_log v5] build: doc: Allow to specify whether to produce man pages, html, neither or both, Duncan Roe
• [iptables PATCH v3 00/13] Eliminate dedicated arptables-nft parser, Phil Sutter
  • [iptables PATCH v3 10/13] nft-shared: Make nft_check_xt_legacy() family agnostic, Phil Sutter
  • [iptables PATCH v3 05/13] nft: Add family ops callbacks wrapping different nft_cmd_* functions, Phil Sutter
  • [iptables PATCH v3 01/13] nft: Introduce builtin_tables_lookup(), Phil Sutter
  • [iptables PATCH v3 08/13] arptables: Use standard data structures when parsing, Phil Sutter
  • [iptables PATCH v3 11/13] xtables: Derive xtables_globals from family, Phil Sutter
  • [iptables PATCH v3 03/13] nft-shared: Introduce init_cs family ops callback, Phil Sutter
  • [iptables PATCH v3 06/13] xtables-standalone: Drop version number from init errors, Phil Sutter
  • [iptables PATCH v3 13/13] nft: Merge xtables-arp-standalone.c into xtables-standalone.c, Phil Sutter
  • [iptables PATCH v3 12/13] xtables: arptables accepts empty interface names, Phil Sutter
  • [iptables PATCH v3 09/13] nft-arp: Introduce post_parse callback, Phil Sutter
  • [iptables PATCH v3 02/13] xshared: Store optstring in xtables_globals, Phil Sutter
  • [iptables PATCH v3 04/13] xtables: Simplify addr_mask freeing, Phil Sutter
  • [iptables PATCH v3 07/13] libxtables: Introduce xtables_globals print_help callback, Phil Sutter
• [PATCH netfilter] netfilter: conntrack: udp: generate event on switch to stream timeout, Maciej Żenczykowski
  • Re: [PATCH netfilter] netfilter: conntrack: udp: generate event on switch to stream timeout, Pablo Neira Ayuso
    • Re: [PATCH netfilter] netfilter: conntrack: udp: generate event on switch to stream timeout, Maciej Żenczykowski
      • Re: [PATCH netfilter] netfilter: conntrack: udp: generate event on switch to stream timeout, Florian Westphal
        • Re: [PATCH netfilter] netfilter: conntrack: udp: generate event on switch to stream timeout, Maciej Żenczykowski
          • Re: [PATCH netfilter] netfilter: conntrack: udp: generate event on switch to stream timeout, Florian Westphal
          • Re: [PATCH netfilter] netfilter: conntrack: udp: generate event on switch to stream timeout, Pablo Neira Ayuso
• [PATCH RFC nf-next 0/9] netfilter: bpf base hook program generator, Florian Westphal
  • [PATCH 1/1] netfilter: add bpf base hook program generator, Florian Westphal
  • [PATCH RFC nf-next 1/9] netfilter: nf_queue: carry index in hook state, Florian Westphal
  • [PATCH RFC nf-next 2/9] netfilter: nat: split nat hook iteration into a helper, Florian Westphal
  • [PATCH RFC nf-next 3/9] netfilter: remove hook index from nf_hook_slow arguments, Florian Westphal
  • [PATCH RFC nf-next 4/9] netfilter: make hook functions accept only one argument, Florian Westphal
  • [PATCH RFC nf-next 5/9] netfilter: reduce allowed hook count to 32, Florian Westphal
  • [PATCH RFC nf-next 6/9] netfilter: add bpf base hook program generator, Florian Westphal