New upstream version 1.26
Marcos Fouces
1 year, 11 months ago
|
0 |
v1.26 Sep 24 2015
|
|
1 |
- Set default tcp_flow_timeout to 1 hour, which should cover most firewalls'
|
|
2 |
and OS's TCP idle timeout
|
|
3 |
|
| 0 | 4 |
v1.25 Feb 18 2013
|
| 1 | 5 |
- added timeouts for tcp streams
|
| 2 | 6 |
|
| 0 | 0 |
|
| 1 | 1 |
====================
|
| 2 | |
libnids-1.25
|
|
2 |
libnids-1.26
|
| 3 | 3 |
====================
|
| 4 | 4 |
|
| 5 | 5 |
1. Building
|
| 0 | 0 |
|
| 1 | 1 |
====================
|
| 2 | |
libnids-1.25
|
|
2 |
libnids-1.26
|
| 3 | 3 |
====================
|
| 4 | 4 |
|
| 5 | 5 |
1. What is libnids ?
|
| 0 | 0 |
<html>
|
| 1 | |
<head><title>Libnids-1.25 API</title>
|
|
1 |
<head><title>Libnids-1.26 API</title>
|
| 2 | 2 |
<meta name="generator" content="with little help of c2html">
|
| 3 | 3 |
|
| 4 | 4 |
</head>
|
| 5 | 5 |
<body>
|
| 6 | 6 |
<h1><center>
|
| 7 | 7 |
====================<br>
|
| 8 | |
libnids-1.25<br>
|
|
8 |
libnids-1.26<br>
|
| 9 | 9 |
====================<br>
|
| 10 | 10 |
</h1></center>
|
| 11 | 11 |
<ol>
|
| 0 | 0 |
====================
|
| 1 | |
libnids-1.25
|
|
1 |
libnids-1.26
|
| 2 | 2 |
====================
|
| 3 | 3 |
|
| 4 | 4 |
1. Introduction
|
| 0 | 0 |
|
| 1 | 1 |
====================
|
| 2 | |
libnids-1.25
|
|
2 |
libnids-1.26
|
| 3 | 3 |
====================
|
| 4 | 4 |
|
| 5 | 5 |
The following applies to Linux only.
|
| 0 | 0 |
|
| 1 | 1 |
====================
|
| 2 | |
libnids-1.25
|
|
2 |
libnids-1.26
|
| 3 | 3 |
====================
|
| 4 | 4 |
|
| 5 | 5 |
This document is obsolete; read LINUX instead !
|
| 0 | 0 |
|
| 1 | 1 |
====================
|
| 2 | |
libnids-1.25
|
|
2 |
libnids-1.26
|
| 3 | 3 |
====================
|
| 4 | 4 |
Libnids uses efficient data structures (hash tables), so it imposes as
|
| 5 | 5 |
little overhead on packets processing as possible. However, in some cases,
|
| 0 | 0 |
|
| 1 | 1 |
====================
|
| 2 | |
libnids-1.25
|
|
2 |
libnids-1.26
|
| 3 | 3 |
====================
|
| 4 | 4 |
|
| 5 | 5 |
In order to verify reliability of libnids, a number of tests were
|
| 12 | 12 |
libdir = @libdir@
|
| 13 | 13 |
mandir = @mandir@
|
| 14 | 14 |
LIBSTATIC = libnids.a
|
| 15 | |
LIBSHARED = libnids.so.1.25
|
|
15 |
LIBSHARED = libnids.so.1.26
|
| 16 | 16 |
|
| 17 | 17 |
CC = @CC@
|
| 18 | 18 |
CFLAGS = @CFLAGS@ -DLIBNET_VER=@LIBNET_VER@ -DHAVE_ICMPHDR=@ICMPHEADER@ -DHAVE_TCP_STATES=@TCPSTATES@ -DHAVE_BSD_UDPHDR=@HAVE_BSD_UDPHDR@
|
| 108 | 108 |
20000, /* queue_limit */
|
| 109 | 109 |
0, /* tcp_workarounds */
|
| 110 | 110 |
NULL, /* pcap_desc */
|
| 111 | |
0 /* tcp_flow_timeout */
|
|
111 |
3600 /* tcp_flow_timeout */
|
| 112 | 112 |
};
|
| 113 | 113 |
|
| 114 | 114 |
static int nids_ip_filter(struct ip *x, int len)
|