Hi!
The Netfilter project presents:
libnetfilter_conntrack 1.1.0
This release includes:
- Enhancements for filtering dump and flush commands,
see struct nfct_filter_dump and nfct_nlmsg_build_filter().
- ctnetlink event BPF fixes (endianness issue, IPv6 matching) and
enhancements (zone matching).
- fix for musl compilation.
See ChangeLog that comes attached to this email for more details.
You can download it from:
https://www.netfilter.org/projects/libnetfilter_conntrack/downloads.html
NB: This release has switched to tar.xz files.
Felix Huettner (2):
dump: support filtering by zone
conntrack: support flush filtering
Jeremy Sowden (5):
conntrack: fix BPF code for filtering on big-endian architectures
conntrack: simplify calculation of `struct sock_fprog` length
conntrack: increase the length of `l4proto_map`
Ignore `configure~`
conntrack: fix BPF for filtering IPv6 addresses
Pablo Neira Ayuso (7):
conntrack: add sanity check to netlink socket filter API
src: reverse calloc() invocation
conntrack: api: bail out if setting up filter for flush/dump fails
conntrack: mnl: clean up check for mismatching l3num and tuple filter
conntrack: update link to git repository
src: remove unused parameter from build functions
libnetfilter_conntrack: bump version to 1.1.0
Peter Fordham (1):
configure: C99 compatibility issues
Phil Sutter (3):
expect/conntrack: Avoid spurious covscan overrun warning
Makefile: Create LZMA-compressed dist-files
conntrack: bsf: Do not return -1 on failure
Priyankar Jain (1):
conntrack: Add zone filtering for conntrack events
Robert Marko (1):
conntrack: fix build with kernel 5.15 and musl
Romain Bellan (2):
Adding NFCT_FILTER_DUMP_TUPLE in filter_dump_attr, using kernel CTA_FILTER API
utils: add NFCT_FILTER_DUMP_TUPLE example
