Jan Kasprzak f87fb666bb netfilter: nf_ct_icmp: keep the ICMP ct entries longer ... Current conntrack code kills the ICMP conntrack entry as soon as the first reply is received. This is incorrect, as we then see only the first ICMP echo reply out of several possible duplicates as ESTABLISHED, while the rest will be INVALID. Also this unnecessarily increases the conntrackd traffic on H-A firewalls. Make all the ICMP conntrack entries (including the replied ones) last for the default of nf_conntrack_icmp{,v6}_timeout seconds. Signed-off-by: Jan "Yenya" Kasprzak <kas@fi.muni.cz> Signed-off-by: Patrick McHardy <kaber@trash.net>		2009-06-08 15:53:43 +02:00
..
9p	net/9p: handle correctly interrupted 9P requests	2009-04-05 16:54:53 -05:00
bluetooth	Bluetooth: Fix issue with sysfs handling for connections	2009-05-04 14:29:02 -07:00
irda	irda: Add irda_skb_cb qdisc related padding	2008-12-17 15:44:58 -08:00
iucv	af_iucv: New socket option for setting IUCV MSGLIMITs	2009-04-23 04:04:38 -07:00
netfilter	netfilter: nf_ct_icmp: keep the ICMP ct entries longer	2009-06-08 15:53:43 +02:00
netns	netfilter: nf_conntrack: use SLAB_DESTROY_BY_RCU and get rid of call_rcu()	2009-03-25 21:05:46 +01:00
phonet	Phonet: use per-namespace devices list	2009-01-26 21:03:35 -08:00
sctp	sctp: Clean up TEST_FRAME hacks.	2009-03-21 13:41:09 -07:00
tc_act	pkt_action: add new action skbedit	2008-09-12 16:30:20 -07:00
tipc	tipc: Remove unneeded parameter to tipc_createport_raw()	2008-07-14 22:42:19 -07:00
act_api.h
addrconf.h	ipv6: Fix conflict resolutions during ipv6 binding	2009-03-24 19:49:11 -07:00
af_rxrpc.h
af_unix.h	net: Fix soft lockups/OOM issues w/ unix garbage collector	2008-11-26 15:32:27 -08:00
ah.h
arp.h
atmclip.h	clip: convert to internal network_device_stats	2009-01-21 14:01:59 -08:00
ax25.h
ax88796.h	ax88796: Add method to take MAC from platform data	2009-03-24 23:32:03 -07:00
cfg80211.h	wireless: move some utility functions from mac80211 to cfg80211	2009-05-22 14:06:02 -04:00
checksum.h	include/net net/ - csum_partial - remove unnecessary casts	2008-11-19 15:44:53 -08:00
cipso_ipv4.h	netlabel: Label incoming TCP connections correctly in SELinux	2009-03-28 15:01:36 +11:00
compat.h	net: Use standard structures for generic socket address structures.	2008-07-19 22:35:47 -07:00
datalink.h
dcbnl.h	net: fix DCB setstate to return success/failure	2008-12-21 20:09:50 -08:00
dn.h	decnet: compile fix for removal of byteorder wrapper	2008-11-27 23:04:13 -08:00
dn_dev.h
dn_fib.h	decnet: remove private wrappers of endian helpers	2008-11-27 00:12:47 -08:00
dn_neigh.h
dn_nsp.h
dn_route.h
dsa.h	dsa: add switch chip cascading support	2009-03-21 19:06:54 -07:00
dsfield.h
dst.h	netns xfrm: lookup in netns	2008-11-25 17:35:18 -08:00
esp.h
ethoc.h	net: Add support for the OpenCores 10/100 Mbps Ethernet MAC.	2009-03-27 00:16:21 -07:00
fib_rules.h	net: Remove unused parameter from fill method in fib_rules_ops.	2009-05-20 17:26:23 -07:00
flow.h	netns xfrm: lookup in netns	2008-11-25 17:35:18 -08:00
garp.h	vlan: Add GVRP support	2008-07-05 21:26:57 -07:00
gen_stats.h	pkt_sched: gen_estimator: Optimize gen_estimator_active()	2008-11-26 15:24:32 -08:00
genetlink.h	genetlink: Introduce genl_register_family_with_ops()	2009-05-21 16:50:22 -07:00
icmp.h	mib: put icmpmsg statistics on struct net	2008-07-18 04:04:22 -07:00
ieee80211_radiotap.h	wireless: radiotap updates	2009-03-27 20:12:52 -04:00
if_inet6.h	ipv6: reorder struct inet6_ifaddr to remove padding on 64 bit builds	2009-03-21 13:29:05 -07:00
inet6_connection_sock.h
inet6_hashtables.h	inet: Don't lookup the socket if there's a socket attached to the skb	2008-10-07 12:41:01 -07:00
inet_common.h	[NETNS]: Inet control socket should not hold a namespace.	2008-04-03 14:28:30 -07:00
inet_connection_sock.h	net: more #ifdef CONFIG_COMPAT	2008-08-28 02:53:51 -07:00
inet_ecn.h	net: replace __constant_{endian} uses in net headers	2009-02-14 22:58:35 -08:00
inet_frag.h	inet fragments: fix sparse warning: context imbalance	2009-02-26 23:13:35 -08:00
inet_hashtables.h	net: move bsockets outside of read only beginning of struct inet_hashinfo	2009-02-01 12:31:33 -08:00
inet_sock.h	tcp: Port redirection support for TCP	2008-10-01 07:46:49 -07:00
inet_timewait_sock.h	net: Convert TCP & DCCP hash tables to use RCU / hlist_nulls	2008-11-16 19:40:17 -08:00
inetpeer.h	net: remove CVS keywords	2008-06-11 21:00:38 -07:00
ip.h	snmp: add missing counters for RFC 4293	2009-04-27 02:45:02 -07:00
ip6_checksum.h
ip6_fib.h	[NETNS][IPV6] rt6_info - move rt6_info structure inside the namespace	2008-03-04 13:48:30 -08:00
ip6_route.h	netns: Add network namespace argument to rt6_fill_node() and ipv6_dev_get_saddr()	2008-08-14 15:33:21 -07:00
ip6_tunnel.h	net: remove CVS keywords	2008-06-11 21:00:38 -07:00
ip_fib.h	ipv4: remove unused macro (FIB_RES_RESET) from ip_fib.h.	2009-05-03 14:19:51 -07:00
ip_vs.h	net: replace __constant_{endian} uses in net headers	2009-02-14 22:58:35 -08:00
ipcomp.h	ipsec: ipcomp - Merge IPComp implementations	2008-07-25 02:54:40 -07:00
ipconfig.h	net: remove CVS keywords	2008-06-11 21:00:38 -07:00
ipip.h	sit: stateless autoconf for isatap	2009-05-19 16:02:02 -07:00
ipv6.h	snmp: add missing counters for RFC 4293	2009-04-27 02:45:02 -07:00
ipx.h	net: replace __constant_{endian} uses in net headers	2009-02-14 22:58:35 -08:00
iw_handler.h	wext: Emit event stream entries correctly when compat.	2008-06-16 18:50:49 -07:00
lapb.h
lib80211.h	wireless: missing include in lib80211.h	2008-11-21 11:42:55 -05:00
llc.h	[LLC]: station source mac address	2008-03-28 16:28:36 -07:00
llc_c_ac.h
llc_c_ev.h
llc_c_st.h
llc_conn.h
llc_if.h
llc_pdu.h	[LLC]: skb allocation size for responses	2008-03-31 21:02:47 -07:00
llc_s_ac.h
llc_s_ev.h
llc_s_st.h
llc_sap.h	[LLC]: skb allocation size for responses	2008-03-31 21:02:47 -07:00
mac80211.h	wireless: move some utility functions from mac80211 to cfg80211	2009-05-22 14:06:02 -04:00
mip6.h	[IPV6] MIP6: Use our standard definitions for paddings.	2008-04-12 13:43:22 +09:00
ndisc.h	ipv6: Fix sporadic sendmsg -EINVAL when sending to multicast groups.	2009-01-04 16:04:39 -08:00
neighbour.h	net: Cleanup of neighbour code	2008-11-12 00:54:54 -08:00
net_namespace.h	netns: Remove net_alive	2009-03-03 01:14:27 -08:00
netdma.h	net_dma: convert to dma_find_channel	2009-01-06 11:38:15 -07:00
netevent.h
netlabel.h	netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connections	2009-03-28 15:01:37 +11:00
netlink.h	netfilter: conntrack: add support for DCCP handshake sequence to ctnetlink	2009-05-27 17:50:35 +02:00
netrom.h	netrom: convert to internal net_device_stats	2009-01-21 14:02:01 -08:00
nexthop.h
p8022.h
pkt_cls.h	ematch: simpler tcf_em_unregister()	2008-11-16 23:01:49 -08:00
pkt_sched.h	pkt_sched: sch_hfsc: sch_htb: Add non-work-conserving warning handler.	2009-02-01 01:12:42 -08:00
protocol.h	ipv6: Add GRO support	2009-01-08 10:40:57 -08:00
psnap.h	snap: use const for descriptor	2009-03-21 19:06:50 -07:00
raw.h	[RAW]: Add raw_hashinfo member on struct proto.	2008-03-22 16:56:51 -07:00
rawv6.h
red.h
regulatory.h	cfg80211: clean up includes	2009-04-22 16:57:17 -04:00
request_sock.h	net: Fix memory leak in the proto_register function	2008-11-21 16:45:22 -08:00
rose.h	rose: improving AX25 routing frames via ROSE network	2008-06-17 17:08:32 -07:00
route.h	ipv4: Conditionally enable transparent flow flag when connecting	2008-10-01 07:35:39 -07:00
rtnetlink.h	[RTNL]: Introduce the rtnl_kill_links helper.	2008-04-16 00:46:52 -07:00
sch_generic.h	net: reorder struct Qdisc for better SMP performance	2009-03-20 01:33:32 -07:00
scm.h	Merge branch 'master' into next	2008-11-14 11:29:12 +11:00
slhc_vj.h
snmp.h	snmp: add missing counters for RFC 4293	2009-04-27 02:45:02 -07:00
sock.h	Merge branch 'master' of /home/davem/src/GIT/linux-2.6/	2009-02-24 03:50:29 -08:00
stp.h	net: Add STP demux layer	2008-07-05 21:25:39 -07:00
tcp.h	Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6	2009-05-08 02:48:30 -07:00
tcp_states.h
timewait_sock.h	net: Fix memory leak in the proto_register function	2008-11-21 16:45:22 -08:00
transp_v6.h	net: replace __constant_{endian} uses in net headers	2009-02-14 22:58:35 -08:00
udp.h	ipv6: Fix NULL pointer dereference with time-wait sockets	2009-04-11 01:53:06 -07:00
udplite.h	udp: introduce struct udp_table and multiple spinlocks	2008-10-29 01:41:45 -07:00
wext.h	wext: Dispatch and handle compat ioctls entirely in net/wireless/wext.c	2008-06-16 18:32:46 -07:00
wimax.h	wimax: fix typo in kernel-doc for debugfs_dentry in struct wimax_dev	2009-01-11 00:06:32 -08:00
x25.h
x25device.h
xfrm.h	netns xfrm: per-netns sysctls	2008-11-25 18:00:48 -08:00