This merges upstream's iproute2 version 3.3.0. Note that change
I32df4075 for bionic is needed for the unshare() syscall.
The merge incorporates the following commits:
commit 4bb00cd2b7525ad7d6cf6bbea945ad6e546873f4
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Mar 19 17:27:12 2012 -0700
v3.3.0
commit 82499282b27c82a25448dc40948920950c9a6936
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Mar 19 17:24:43 2012 -0700
ip: allow set and display of link mode parameter
The kernel supports a link mode attribute (which can be dormant or default).
This attribute is used to control how the link watch engine
handles operstate transistion.
This adds a new parameter to ip link command to allow setting and
displaying the value.
---
commit 718165534d0c57ea23c536f57affe7f04a33199a
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Mar 19 17:18:49 2012 -0700
gre: allow 0 as a legal key value
There is nothing in the standard that says 0 can't be used as a key.
It makes sense to allow it. Also fix typo where ikey was printed for
when printing okey.
commit 7dd03712226d2943e46f427217158707c148d2b3
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Mar 15 17:47:51 2012 -0700
Fix rta_getattr_u32 wrapper and add getattr_u8
commit 598a42c09153a1b6cfe03efa3f7e68773eec912d
Author: Florian Westphal <fw@strlen.de>
Date: Tue Mar 13 12:35:25 2012 +0000
ip: xfrm: report nat-t/encapsulation portmapping updates
Signed-off-by: Florian Westphal <fw@strlen.de>
commit c23abafbdcdd3754bea50f1452fed36da5515379
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Mar 15 14:44:13 2012 -0700
update to 3.3-rc7 kernel headers
commit 43d29f782f12d6212ea3717a3a47b0036474a67c
Author: Kenyon Ralph <kenyon@kenyonralph.com>
Date: Thu Mar 15 14:39:12 2012 -0700
Update ip address manual page
* update synopsis to match "ip address help" output
* specify IPv4, since "IP" is ambiguous
* remove deprecated site scope
* document lifetimes, home, and nodad
* update wording to make sense since page was split from the ip(8) page
* git rid of extra spaces
commit 90d98edf39dc7da64fdf79408d5378e8d88acbe3
Author: Anton Danilov <littlesmilingcloud@gmail.com>
Date: Thu Mar 15 14:24:59 2012 -0700
csum action, fix typo
commit b8d59e1ec1c4b9bfbe9caa14b3aa8f976f7cd045
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Mar 14 10:38:53 2012 -0700
Fix ip-monitor manual page what-is entry
Debian warning that NAME wasn't parsible
commit 09fa32794154a69d4a6fbc58c1ee02dbe26a99e9
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Mar 14 10:24:25 2012 -0700
iproute: allow changing gretap parameters
Change the order of evaluation of ip link type arguements to allow
changing parameters of gre tunnels.
The following wouldn't work:
# ip li add mytunnel type gretap remote 1.1.1.1 key 3
# ip li set mytunnel type gretap key 9
commit a6ddc2061730af713d69b78968a84c1be929f4c4
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Mar 14 10:22:25 2012 -0700
Keep cscope around after make clean
Follow convention of kernel and keep cscope file around
after make clean.
commit f526af995e4b610334ddea250686643b2d6e9729
Author: Andreas Henriksson <andreas@fatal.se>
Date: Fri Mar 9 17:09:19 2012 +0100
iproute: fix tc -iec display of Mibit rates
As reported by Thomas Mühlgrabner <muehltom@cable.vol.at>
in http://bugs.debian.org/662979 :
When showing htb class configuration with "tc -iec class show",
the output for Mibit is actually the value for bit.
Example: configure a class with a ceil of 1000Mibit.
Output states 1048576000 Mibit.
The cause is missing parenteses in the display code of tc....
(Please also note that a lower value of 100Mibit will be displayed
as 102400 Kibit, which I think is kind of ugly.)
Reported-by: Thomas Mühlgrabner <muehltom@cable.vol.at>
Signed-off-by: Andreas Henriksson <andreas@fatal.se>
commit 8ced4fcd50dbbf7a0219ff5705390e6f89ba434c
Author: Yegor Yefremov <yegorslists@googlemail.com>
Date: Mon Feb 27 15:21:15 2012 +0100
iproute2: cleanup dependencies
LIBNETLINK will be defined in the main Makefile, so
both ../lib/libnetlink.a ../lib/libutil.a will be
automatically appended during linking. Otherwise
../lib/libnetlink.a ../lib/libutil.a will appear
twice during linking.
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
commit e2a4536a4315ba1db6afccd4ccc41499bbde4c14
Author: Petr Sabata <contyk@redhat.com>
Date: Wed Feb 15 06:02:33 2012 +0000
iproute2: tc - mqprio formatted print fix
Just a minor correction of mqprio printf()'s.
Reported-by: Petr Písař <ppisar@redhat.com>
Signed-off-by: Petr Šabata <contyk@redhat.com>
commit e6e6fb5c6a4f12112d41c6f4a3de1002f7fc3d4f
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Tue Feb 21 17:18:59 2012 -0800
ipaddress: cleanup code for link stats64
On 64 bit platform, casting to unsigned long long is unnecessary.
Use inttypes.h and stdtypes.h to resolve it.
commit 0df7db3cf431d88953cda6220e76ece39bd0c344
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Fri Feb 17 08:17:09 2012 -0800
arpd: allow configuring polling interval
A new option -p is added to the arpd command that accepts
a time indicating the number of seconds
to wait between kernel arp table polling attempts.
The minimum value is .1 (100ms).
If not specified, polling defaults to 30 seconds.
Patch by Erik Hugne <erik.hugne@ericsson.com> with
modifications
commit 2728f598bbeb6d4b7cc7f65a774ab70fdca04ab4
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Feb 16 16:42:42 2012 -0800
ss: simplify code
Rather than copy-pasting code using sendmsg/recvmsg, use the simpler
send() and recv() system calls.
commit c51577cd133a4b569349983f2e49933d0a124a0b
Author: Matt Tierney <tierney@cs.nyu.edu>
Date: Wed Feb 15 18:20:38 2012 -0500
ss: Close file descriptors in tcp_show_netlink.
ss: Close file descriptors in tcp_show_netlink.
Signed-off-by: Matt Tierney <tierney@cs.nyu.edu>
commit 20ed7b24df05eadf83168d1d0ce0052a31380928
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Feb 15 10:05:45 2012 -0800
dhcp-client-script: don't use /tmp
/tmp is a dangerous place and better to put log files in /var/log.
Based on patch by Vasiliy Kulikov <segoon@openwall.com>
commit e557d1ac3a156ba7521ba44b0b412af4542f83f8
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Feb 15 10:03:39 2012 -0800
Don't put configure files in /tmp
Based on patch by Vasiliy Kulikov <segoon@openwall.com>
Don't use /tmp since it is dangerous, instead put temporary files
from configure script in build directory. This is what autoconf
generated configure does.
commit cdae8bcc0fb4210a632acddac4401cad3b09c707
Author: Tony Zelenoff <antonz@parallels.com>
Date: Thu Jan 26 04:50:05 2012 +0000
Adjust man page for new functionality
Signed-off-by: Tony Zelenoff <antonz@parallels.com>
commit 1dac7817b44f0dea2828c2b897c7b3c81550e057
Author: Tony Zelenoff <antonz@parallels.com>
Date: Thu Jan 26 04:50:04 2012 +0000
Modify neighbour proxy show
New "ip neigh show proxy" command now can show proxies which
were added with "ip neigh add proxy" command. Kernel code to
support this feature sent a bit earlier to netdev.
Signed-off-by: Tony Zelenoff <antonz@parallels.com>
commit 0e56c6b69b8d1a073b5741798e662cca19adaa70
Author: Greg Rose <gregory.v.rose@intel.com>
Date: Thu Feb 9 13:21:16 2012 -0800
iproute2: Add VF spoofchk command description to ip-link.8 man page
Add documentation for the ip link set spoof checking option. The
expanded text section explaining the VF commands was missing this
text.
Signed-off-by: Greg Rose <gregory.v.rose@intel.com>
Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
commit d798a0483ed6b3c7dcf84595b38a75e04ac0ee54
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Feb 6 09:45:50 2012 -0800
red: add missing include math.h
red now uses pow() function.
commit cfd2cbd15f03e26fdb8617a9f37a0a25425adfe2
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Feb 6 09:35:27 2012 -0800
Add cast to rta_getattr_str
Warning from C++
commit a3fd8e58c1787af186f5c4b234ff974544f840b6
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Mon Jan 30 17:05:45 2012 +0100
ss: should support CONFIG_INET_UDP_DIAG=n kernels
ss -x currently fails if CONFIG_INET_UDP_DIAG=n or old kernels
Also close file descriptors while we are at it.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Cc: Pavel Emelyanov <xemul@parallels.com>
commit 50c6f3ee5bc6b6aa3c9f4a0efc79c2621ce3650a
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Tue Jan 24 14:29:38 2012 +0100
tc-sfq: update man page
Add documentation about RED mode, and new parameters (flows, depth)
added in linux 3.3
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit e61df2105cb0cb936bb4298b6139544ca1bfa62a
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Tue Jan 24 14:18:33 2012 +0100
tc-red: update man page
include documentation for harddrop and adaptive parameters.
All parameters but limit and avpkt are optional.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit e330c1853d69576eaa584b9cb5ecaa79d674ad75
Author: Vijay Subramanian <subramanian.vijay@gmail.com>
Date: Mon Jan 23 22:08:52 2012 -0800
netem: Fix 'reorder' section of man page
The syntax used in the example on reordering in the manpage is inconsistent with
the usage syntax. Moreover, the text does not describe the reordering process
in the kernel correctly. This patch fixes these two issues.
Signed-off-by: Vijay Subramanian <subramanian.vijay@gmail.com>
commit 0bdb83cd703fd96ba765122b1fd205318db606bc
Author: Vijay Subramanian <subramanian.vijay@gmail.com>
Date: Mon Jan 23 22:08:51 2012 -0800
netem: Fix up grammatical errors in man page
Signed-off-by: Vijay Subramanian <subramanian.vijay@gmail.com>
commit f6062360100ada8cbaac5b837c85c8f2f3e0765d
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Fri Jan 20 12:48:00 2012 -0800
Fix unix socket diagnostic build
Get updated headers incorporated into build environment
and include required sock_diag.h.
commit dfbaa90dec05d3798ad845db20e1b273ffcfcf0a
Author: Pavel Emelyanov <xemul@parallels.com>
Date: Thu Dec 15 03:28:15 2011 +0000
iproute: Dump unix sockets via netlink
Get the same info as from /proc file plus the peer inode.
Applies on top of new sock diag patch and udp diag patch.
Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
commit db4a7f198b6193a1e584c3b6647d92bb6c66fb52
Author: nick black <dankamongmen@gmail.com>
Date: Fri Jan 20 12:32:44 2012 -0800
Update ip manpage
Fix synopsis and other references to match current code.
commit 14a1c164d12e32415acc44ef566fcf52ff4dd113
Author: Vijay Subramanian <subramanian.vijay@gmail.com>
Date: Fri Jan 20 09:50:25 2012 -0800
netem: Fail cleanly if user input is wrong
(Resending patch since it looks like my earlier mail did not make it to
netdev).
netem reordering requires that the delay parameter be given. Currently, if no
delay is given, tc prints the error message but still installs the qdisc. Fix
this by printing the usage and failing cleanly.
Signed-off-by: Vijay Subramanian <subramanian.vijay@gmail.com>
commit fdeae171e52845b465971566c9a14498dda34307
Merge: 1b6f0bb 5aa08f6
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Fri Jan 20 08:17:59 2012 -0800
Merge branch 'master' of nehalam:src/iproute2
commit 5aa08f6bf4107f8aec43c0678466a314dbd0d054
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Fri Jan 20 08:16:02 2012 -0800
ip: make 'ip l' be 'ip link'
Restore compatiablity for those lazy typists.
commit 1b6f0bb5be5d71fd62ed6ccbc3665adc6e747b82
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Fri Jan 20 16:27:50 2012 +0100
gred: support TCA_GRED_MAX_P attribute
TCA_GRED_MAX_P permits to express high resolution probabilities.
New output (on 3.3+ kernel) :
disc gred 9442: root refcnt 17
DP:0 (prio 1) Average Queue 0b Measured Queue 0b
Packet drops: 0 (forced 0 early 0)
Packet totals: 20 (bytes 2584)
limit 31460b min 3000b max 9000b ewma 5 probability 0.05 Scell_log 15
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit 650252d8c36453dd08de3e67235d8f326ba451ec
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Fri Jan 20 16:19:44 2012 +0100
choke: support TCA_CHOKE_MAX_P
TCA_CHOKE_MAX_P permits to express high resolution RED probability.
tc qdisc add dev $DEV parent 1:1 handle 10: est 1sec 8sec choke \
limit 90 ecn min 10 max 30 probability 0.05 bandwidth 10Mbit
Before patch :
tc -s -d qdisc show dev eth3
qdisc ... limit 90p min 10p max 30p ecn ewma 3 Plog 19 Scell_log 13
After :
qdisc ... limit 90p min 10p max 30p ecn ewma 3 probability 0.05
Scell_log 13
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit 6987ecf0832d62350ea10432f3f1f7a84c457b81
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Fri Jan 20 12:17:43 2012 +0100
sfq: add optional RED on top of SFQ
Adds an optional Random Early Detection on each SFQ flow queue.
Traditional SFQ limits count of packets, while RED permits to also
control number of bytes per flow, and adds ECN capability as well.
1) We dont handle the idle time management in this RED implementation,
since each 'new flow' begins with a null qavg. We really want to address
backlogged flows.
2) if headdrop is selected, we try to ecn mark first packet instead of
currently enqueued packet. This gives faster feedback for tcp flows
compared to traditional RED [ marking the last packet in queue ]
Example of use :
tc qdisc add dev $DEV parent 1:1 handle 10: est 1sec 4sec sfq \
limit 3000 headdrop flows 512 divisor 16384 \
redflowlimit 100000 min 8000 max 60000 probability 0.20 ecn
qdisc sfq 10: parent 1:1 limit 3000p quantum 1514b depth 127 headdrop
flows 512/16384 divisor 16384
ewma 6 min 8000b max 60000b probability 0.2 ecn
prob_mark 0 prob_mark_head 4876 prob_drop 6131
forced_mark 0 forced_mark_head 0 forced_drop 0
Sent 1175211782 bytes 777537 pkt (dropped 6131, overlimits 11007
requeues 0)
rate 99483Kbit 8219pps backlog 689392b 456p requeues 0
In this test, with 64 netperf TCP_STREAM sessions, 50% using ECN enabled
flows, we can see number of packets CE marked is smaller than number of
drops (for non ECN flows)
If same test is run, without RED, we can check backlog is much bigger.
qdisc sfq 10: parent 1:1 limit 3000p quantum 1514b depth 127 headdrop
flows 512/16384 divisor 16384
Sent 1148683617 bytes 795006 pkt (dropped 0, overlimits 0 requeues 0)
rate 98429Kbit 8521pps backlog 1221290b 841p requeues 0
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit 54a2fce832b6993c83ce0d6b6c9ee08317c1d90c
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Fri Jan 20 16:10:13 2012 +0100
red: fix adaptive spelling
Reported-by: Jesse Brandeburg <jesse.brandeburg@intel.com>
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit e7e4abea3e9f37ac18ce3f104ac8e61b5f144459
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Thu Jan 19 14:45:20 2012 -0800
red: Add adaptative algo Logged in as shemminger
Enable Adaptative RED algo, using :
tc qdisc ... red limit BYTES ... adaptative ...
Support of high precision probability/max_p setting and reporting, with
support of old kernels.
With a new kernel, "Plog ..." is replaced in tc output by "probability
value" :
qdisc red 10: dev eth3 parent 1:1 limit 360Kb min 30Kb max 90Kb ecn ewma
5 probability 0.09 Scell_log 15
commit 59858866e3c369574ddebfcd27f064980e8ea775
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Jan 19 14:38:36 2012 -0800
netem: add rate extension to man page
Fixed up version of patch from Hagen Paul Pfeifer <hagen@jauu.net>
Also run spell check.
commit 6b8dc4deea219d6c4392707bb647cc49cdc46da7
Author: Hagen Paul Pfeifer <hagen@jauu.net>
Date: Thu Jan 19 14:28:27 2012 -0800
tc: netem rate shaping and cell extension
This patch add rate shaping as well as cell support. The link-rate can be
specified via rate options. Three optional arguments control the cell
knobs: packet-overhead, cell-size, cell-overhead. To ratelimit eth0 root
queue to 5kbit/s, with a 20 byte packet overhead, 100 byte cell size and
a 5 byte per cell overhead:
tc qdisc add dev eth0 root netem rate 5kbit 20 100 5
Signed-off-by: Hagen Paul Pfeifer <hagen@jauu.net>
commit 30d10db5667d3ca86917ca86c1a65cfcc45965f9
Author: Hagen Paul Pfeifer <hagen@jauu.net>
Date: Tue Dec 20 11:28:46 2011 +0000
utils: add s32 parser
Signed-off-by: Hagen Paul Pfeifer <hagen@jauu.net>
commit aa38c3eefaf6c6f4fd0a8858f6b771b6c8f84129
Author: Masatake YAMATO <yamato@redhat.com>
Date: Thu Jan 19 14:16:12 2012 -0800
using NLM_F_DUMP flag constant in libnetlink.c
This is trivial patch for libnetlink.c in iproute2.
In iproute2/include/linux/netlink.h NLM_F_DUMP is defines as:
#define NLM_F_DUMP (NLM_F_ROOT|NLM_F_MATCH)
It is not used in libnetlink.c. If used, the code becomes a bit easier
to read.
Signed-off-by: Masatake YAMATO <yamato@redhat.com>
commit 1c4cbdbc6a33a9b4d6e0e95749d64cd718f3c21e
Author: Vijay Subramanian <subramanian.vijay@gmail.com>
Date: Thu Jan 19 13:17:03 2012 -0800
netem: Add missing '}' in man page
Signed-off-by: Vijay Subramanian <subramanian.vijay@gmail.com>
commit 7878c0ba404c3688442d2362203d79fa108450e0
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Jan 19 14:09:42 2012 -0800
Update to 3.3 headers (with inet_diag fix)
Incorporate change to fix inet_diag build failure.
commit a08d2590a042f8173713cb3b1bf7bb7aeb3ce584
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Tue Jan 10 10:50:02 2012 -0800
Update to kernel v3.3 headers
Initial merge window version of headers
commit aab2702d33b19326e24a61264f7fcb28d88c9b45
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Tue Jan 10 10:47:28 2012 -0800
Fix man page whatis entry errors
lintian says:
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man7/tc-hfsc.7.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-address.8.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-addrlabel.8.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-link.8.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-maddress.8.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-monitor.8.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-mroute.8.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-neighbour.8.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-netns.8.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-ntable.8.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-route.8.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-rule.8.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-tunnel.8.gz
W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-xfrm.8.gz
commit 13603f6a9e46f08576f6284a0ef1ce1fbf94ffe0
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Tue Jan 10 08:50:49 2012 -0800
iplt2p: remove unused libnl headers
Leftover from change to original code.
commit 447c118f138171b260ad045ad6e1b17f9ef462e2
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Jan 5 08:34:31 2012 -0800
v3.2.0
commit 8e91a80d975d4086178158214d35af793695b614
Author: Jan Engelhardt <jengelh@medozas.de>
Date: Wed Jun 1 00:52:07 2011 +0200
iproute2: fix calling up the xt action
Upsteam: has not been sent yet
Requesting the xt action never succeeded because it registered
using the wrong name.
commit d7aa57d450b2b651e9115d5d9ad6bf0f433798da
Author: Jan Engelhardt <jengelh@medozas.de>
Date: Sat Sep 24 23:37:34 2011 +0200
iproute2: proper detection of libxtables position and flags
Upstream: not sent yet
Any tests involving iptables _MUST_ utilize pkg-config to find the
proper locations of the installation.
commit 6c513a006174e551552022405d677a897db78652
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Tue Jan 3 15:04:55 2012 -0800
README cleanup's
Spell check the README files and remove out of date release notes.
commit 155ad8023b2be449752e396306fb67785fb1ba8d
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Tue Jan 3 13:55:59 2012 -0800
ematch: fix warning about unused input()
Use existing compile flag to indicate that input() is not used
by tc ematch, fixes compiler warning.
commit 5761f04fb8f47db22464ad420dd1a99ed842d569
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Tue Jan 3 13:55:00 2012 -0800
ematch: fix warning about yyerror and const
yyerror() should take const char * on current bison.
commit f5b830dc5dab07149157eb007de9a858a57e880b
Author: Jan Engelhardt <jengelh@medozas.de>
Date: Sat Dec 31 23:16:27 2011 +0100
iproute2: avoid use of implicit declarations
gcc -DLIBDIR=\"/usr/lib64\" -D_GNU_SOURCE -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -Wstrict-prototypes -fPIC -DXT_LIB_DIR=\"/usr/lib64/xtables\" -I../include -DRESOLVE_HOSTNAMES -DLIBDIR=\"/usr/lib64\" -fPIC -c -o ipx_pton.o ipx_pton.c
In file included from ../include/utils.h:8:0,
from ipx_ntop.c:5:
../include/libnetlink.h: In function 'rta_getattr_u64':
../include/libnetlink.h:84:2: warning: implicit declaration of function 'memcpy'
../include/libnetlink.h:84:2: warning: incompatible implicit declaration of built-in function 'memcpy'
commit 38cd311adef818a891a0d9fa778969419fe55141
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Fri Dec 23 20:52:10 2011 -0800
l2tp: Add l2tp support
Based on earlier implementation by James Chapman. But instead of
dragging in all of libnl, use existing libnetlink infrastructure.
commit 46c5d64d6967da4401122159a8d9488c1878be65
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Dec 29 09:29:33 2011 -0800
libnetlink: add attribute access inline functions
Based on idea in libmnl, add attribute access functions instead
of explicitly exposing casts. Also handle possible alignment issues
of u64.
commit cd70f3f522e04b4d2fa80ae10292379bf223a53b
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Dec 28 10:37:12 2011 -0800
libnetlink: remove unused junk callback
Both rtnl_talk and rtnl_dump had a callback for handling portions
of netlink message that do not match the correct pid or seq.
But this callback was never used by any part of iproute2 so remove
it.
commit d060de7f8da283fcd410b16f687cd6b33382c316
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Sat Dec 24 05:39:13 2011 +0100
netem: fix a typo in explain()
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit 2aa3dd29a75c494bf969586da5489d4dc7d07839
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Fri Dec 23 10:43:54 2011 -0800
libnetlink: add more attribute functions
New functions to handle u8, u16, u32, u64 and string attribute types.
Use common code for all attribute wrappers.
commit 6cf8398f5f487762586801c25539d8fe5bb33b39
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Fri Dec 23 10:40:04 2011 -0800
libnetlink: change rtnl_send() to take void *
Avoid having to cast buffer being sent.
commit 3c7950af598beab378a291ee0540da438978a4b2
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Dec 22 17:08:11 2011 -0800
netem: add support for 4 state and GE loss model
Incorporate support for new loss models.
commit fd6fac34e908fb3bd2cc83ee3870ec5a9601b0dc
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Dec 22 16:50:54 2011 -0800
netem: fix man page
Format man page with conventional style (BNF and italics) to make
it match other pages.
Fix loss model options to match what will implemented!
commit 1b1177ed5f3a8e34b1c7c7c79922c31448f212c9
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Dec 22 10:40:39 2011 -0800
Update to latest 3.2 kernel headers
Keep in sync
commit 2a9721f1c4efc2b0a0b814a705b393b1533e60d8
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Dec 22 10:34:03 2011 -0800
Split up ip man page
The man page for ip command had grown too large to be readable.
Break it up into separate pages.
commit 2587c01a0e7153909986694a4c547e108643c0a3
Author: Florian Westphal <fw@strlen.de>
Date: Sun Dec 11 12:31:58 2011 +0000
tc: man: add man page for stochastic fair blue
With help from Eric Dumazet.
Man page is derived in parts from README file contained in
Juliusz Chroboczeks original sfb kernel patch.
commit 841fc7bc983d2f8d8de589c151d2f8bdf8d73b18
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Fri Dec 9 00:11:40 2011 +0100
red: harddrop support and cleanups
Add harddrop support (kernel support added a long time ago), and various
cleanups.
min BYTES, max BYTES are now optional and follow Sally Floyd's
recommendations.
By the way, our default 2% probability is a bit low, Sally recommends 10%.
Not a big deal if upcoming adaptative algo is deployed.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit cd72dcf13c8a4948ee5706794714287eeff62c90
Author: Hagen Paul Pfeifer <hagen@jauu.net>
Date: Fri Nov 25 03:47:56 2011 +0000
netem: add man-page
Signed-off-by: Hagen Paul Pfeifer <hagen@jauu.net>
commit ab15aeacf5a106cfb8e72cd6760e8cf134161ceb
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Thu Dec 1 15:25:59 2011 +0100
red: make burst optional
Documentation advises to set burst to (min+min+max)/(3*avpkt)
Let tc do this automatically if user doesnt provide burst himself.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit 0cf67ead7bdc95700958b9cfd341b75b4432bb88
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Thu Dec 1 12:04:31 2011 +0100
red: give a hint about burst value
Check for burst values that are too small.
Reported-by: Dave Taht <dave.taht@gmail.com>
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit 7b8179c780a1abd547e5002c4e6fba898c6d72bb
Author: Greg Rose <gregory.v.rose@intel.com>
Date: Thu Oct 13 20:31:32 2011 +0000
iproute2: Add new command to ip link to enable/disable VF spoof check
Add ip link command parsing for VF spoof checking enable/disable
V2 - Fixed problem with parsing of dump info on kernels that don't
support the spoof checking option and also wrapped the ifla_vf_info
structure in #ifdef __KERNEL__ to prevent user space from directly
accessing the structure
V3 - Improved parsing of vfinfo
V4 - Put Makefile back to proper list of subdirs
V5 - Remove struct ifla_vf_info, it is only used by the kernel
V6 - Make sure spoof check is reported by the driver - rtnl will set
it to -1 to indicate driver didn't report a value.
Signed-off-by: Greg Rose <gregory.v.rose@intel.com>
Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
commit 719b958bbdfd1cb85d4b59826c503d0982322a9d
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Wed Nov 16 07:59:06 2011 +0000
ss: report ecnseen
Support ECNSEEN reporting in ss command.
ESTAB 0 0 10.170.73.123:4900
10.170.73.125:51001 uid:501 ino:385994 sk:f31e5f00
mem:(r0,w0,f0,t0) ts sack ecn ecnseen bic wscale:8,8 rto:210
rtt:18.75/15 ato:40 cwnd:10 send 69.9Mbps rcv_space:32768
"ecn" means TCP session negociated ECN capability (TCP layer) at setup
time
"ecnseen" at least one frame with ECT(0) or ECT(1) or ECN (IP layer) was
received from peer.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit fcbd0165fcf6d0efdfb02220ac77342ce0c0e224
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Wed Nov 23 22:15:19 2011 +0100
tc: Use correct variable type for get_distribution() result
get_distribution() returns an int.
cppcheck reported:
[tc/q_netem.c:243]: (style) Checking if unsigned variable 'dist_size' is less than zero.
The mismatch actually rendered the error checking
after get_distribution() ineffective.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit a3da01c519ed13714ad80be3a771e81ae10ea835
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Wed Nov 23 22:13:23 2011 +0100
tc: Remove unused variable 'res'.
Detected by cppcheck.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit 9044a4547d73df5c41fd53c83e5ccc2a59200797
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Nov 23 14:34:49 2011 -0800
Update to 3.2.0-rc2 headers
commit 9cbe6bc337a35b91882f92599eefeb161f3e776e
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Nov 17 16:53:50 2011 -0800
v3.1.0
commit 16963ce6f01f94d1f5486008c4d73f5612beb1a6
Author: Petr Šabata <contyk@redhat.com>
Date: Wed Nov 16 09:32:20 2011 -0800
Display closed UDP sockets on 'ss -ul'
This patch emulates 'netstat -ul' behavior, showing 'closed'
(state 07) UDP sockets when ss is called with '-ul' options.
Although dirty, this seems like the least invasive way to fix
it and shouldn't really break anything.
Signed-off-by: Petr Šabata <contyk@redhat.com>
commit 93ba481acbbdfbbc5de2bf181c9cfe5549d66cdd
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Nov 2 16:39:36 2011 -0700
cleanup ematch yacc files
make clean needs to remove all the yacc output files for ematch.
commit 9bac173fa6d5d96fac795bab95957938da8fdd2d
Author: Michal Soltys <soltys@ziu.info>
Date: Mon Oct 31 22:56:38 2011 +0100
HFS manpage changes
Few minor changes and small additions.
commit 41f6004139e3dd8c8ab0d62ad0142f92b22e8c4a
Author: Michal Soltys <soltys@ziu.info>
Date: Wed Oct 26 04:15:21 2011 -0400
HFSC (7) & (8) documentation + assorted changes
This patch adds detailed documentation for HFSC scheduler. It roughly
follows HFSC paper, but tries to not rely too much on math side of things.
Post-paper/Linux specific subjects (timer resolution, ul service curve, etc.)
are also discussed.
I've read it many times over, but it's a lengthy chunk of text - so try
to be understanding in case I made some mistakes.
tc-hfsc(7): explains algorithm in detail (very long)
tc-hfsc(8): explains command line options briefly
tc(8): adds references to new man pages
Makefile: adds man7 directory to install target
q_hfsc.c: minimal help text changes, consistency with tc-hfsc(8)
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
commit aa48b5931a069b8f8faf41c2efc769f3127b28d6
Author: Mike Frysinger <vapier@gentoo.org>
Date: Tue Oct 18 17:38:08 2011 -0400
tc: fix parallel build file with lex/yacc
Building iproute2 in parallel might hit the race failure:
emp_ematch.l:2:30: fatal error: emp_ematch.yacc.h:
No such file or directory
make[1]: *** [emp_ematch.lex.o] Error 1
This is because we currently allow the yacc/lex files to generate and
compile in parallel. So add a simple dependency to make sure yacc has
finished before we attempt to compile the lex output.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
commit 7397944de6c11519a5951fc1bcff20225e71c4bd
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Oct 13 08:38:33 2011 -0700
ip: fix exit codes
Alternative fix to problem reported by: Bin Li
The issue is came from https://bugzilla.novell.com/show_bug.cgi?id=681952.
In any previous version (since suse ... 10.0?), ip addr add always returned
the error code 2 in case the ip address is already set on the interface:
inet 172.16.2.3/24 brd 172.16.2.255 scope global bond0
RTNETLINK answers: File exists
2
On 11.4, it returns the exit code 254:
inet 172.16.1.1/24 brd 172.16.1.255 scope global eth0
RTNETLINK answers: File exists
254
This of course causes ifup to return an error in this quite common case..
commit 788731b320f87db9dc99638d2e3cf94bca245c6d
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Thu Oct 13 10:30:21 2011 +0200
Fix unterminated readlink() buffer usage
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit 707f612c00a91fe3c17d7af5319e423545a496c5
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Oct 10 11:02:42 2011 -0700
Update to 3.1-rc9 kernel headers
Align header files with sanitized version of headers in kernel.
commit ce691fb5ce78b2c75243c60a757a3990ae09681c
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Oct 10 08:59:54 2011 -0700
v3.0.0
commit b702f9cc3713dec6f79d75956b185679bb810f19
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Oct 10 08:55:56 2011 -0700
ip: fix man page warnings
Fix usage of ".R" which is not man macro.
commit 19bcc05beade576878abc04c53f17d4a5a620610
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Mon Oct 3 05:24:44 2011 +0000
Fix file descriptor leak on error in read_igmp()
Detected by cppcheck.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit 297452a1c24f1fbbdc41e220422aa1fb7b4dccf0
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Mon Oct 3 05:24:32 2011 +0000
Fix file descriptor leak in do_tunnels_list()
Detected by cppcheck.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit e588a7db167df75e659f99bd3b024eedafed62cc
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Mon Oct 3 05:24:18 2011 +0000
Fix file descriptor leak on error in read_mroute_list()
Detected by cppcheck.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit 67ef60a29333784d09245762e8270727cc758945
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Mon Oct 3 05:24:08 2011 +0000
Fix file descriptor leak on error in read_viftable()
Detected by cppcheck.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit 25352af7c2ee7291ac54a00a77b7e1de20676fe6
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Mon Oct 3 05:23:53 2011 +0000
Fix file descriptor leak on error in iproute_flush_cache()
Detected by cppcheck.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit e9a927dc08c8e8e70f68f84983c488158afb4a95
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Mon Oct 3 05:23:42 2011 +0000
Add missing closedir() call in do_show()
Detected by cppcheck.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit 1a6543c56bead259a44d5d1f288392503eaec292
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Mon Oct 3 05:23:30 2011 +0000
Fix memory leak of lname variable in get_target_name()
Detected by cppcheck.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit 9f1ba57016da5e65b83092f5ab05565091e0879d
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Mon Oct 3 05:23:18 2011 +0000
Fix wrong sanity check in choke_parse_opt()
Detected by cppcheck.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit 6d5ee98a7c47644308ccb167faa93e07bb702fd8
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Mon Oct 3 05:22:56 2011 +0000
Fix wrong comparison in cmp_print_eopt()
Detected by cppcheck.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit 97c13582f98377c9e1a72ed40fb2b80225c4c0f9
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Mon Oct 3 05:22:42 2011 +0000
Fix file descriptor leak on error in rtnl_hash_initialize()
Detected by cppcheck.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit 21a5a6b37892d7173f38691d1f84366840ce3917
Author: Jiri Benc <jbenc@redhat.com>
Date: Mon Sep 19 05:14:10 2011 +0000
iproute2: fix changing of ip6ip6 tunnel parameters
When changing ip6ip6 parameters (ip -6 tun change), ip passes zeroed
struct ip6_tnl_parm to the kernel. The kernel then tries to change all of
the tunnel parameters to the passed values, including zeroing of local and
remote address. This fails (-EEXIST in net/ipv6/ip6_tunnel.c:ip6_tnl_ioctl).
For other tunnel types, ip fetches the current parameters first and applies
the required changes on top of them. This patch applies the same code as in
ip/iptunnel.c to ip/ip6tunnel.c.
See http://bugzilla.redhat.com/730627 for the original bug report.
Signed-off-by: Jiri Benc <jbenc@redhat.com>
commit 2bcc3c16293fc049e29989a2ddeffe71a1cf3910
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date: Mon Oct 3 05:22:27 2011 +0000
Fix pipe I/O stream descriptor leak in init_service_resolver()
Detected by cppcheck.
Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
commit a22e92951d21d0f796040d0d6c00d59a1e188bca
Author: Sridhar Samudrala <sri@us.ibm.com>
Date: Thu Oct 6 16:10:51 2011 -0700
iproute2: Fix usage and man page for 'ip link'
Add bridge as a supported type with 'ip link' in usage and all the missing
types in 'ip' man page. Also fixed some typos.
Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>
commit 281d740691cde36eb8b23f8a97c90f8684638f45
Author: Petr Sabata <contyk@redhat.com>
Date: Thu Oct 6 14:45:34 2011 +0200
iproute2: arpd - fix usage and manpage options
Signed-off-by: Petr Sabata <contyk@redhat.com>
commit 7e8bd80e38011a228d9843d312f7a9bb0f811b00
Author: Petr Sabata <contyk@redhat.com>
Date: Thu Oct 6 14:45:33 2011 +0200
iproute2: lnstat - fix typos
Signed-off-by: Petr Sabata <contyk@redhat.com>
commit 583de1498e05e5a826b217cc645f92ce0bd015e8
Author: Petr Sabata <contyk@redhat.com>
Date: Thu Oct 6 14:45:32 2011 +0200
iproute2: ss - fix missing parameters
Signed-off-by: Petr Sabata <contyk@redhat.com>
commit 8555902504bcae8609cb79118f4c485c79f16856
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Aug 31 13:23:04 2011 -0700
Add ntable to ip man page
Add some documentation about ip neighbour table parameter command.
commit 4f3626f9206b8a23637a3c36ec28db1e895850d4
Author: Dan McGee <dan@archlinux.org>
Date: Wed Aug 31 12:18:49 2011 -0700
xt: only unset fields if m is non NULL
commit 9a230771c0a0b27e2f26bbbc29a93ad1ad591ce9
Author: Dan McGee <dan@archlinux.org>
Date: Wed Aug 31 12:16:36 2011 -0700
ensure uptime is initialized if /proc/uptime cannot be opened
commit 1b129bf2fe280f9aa7a22cbcd00dd3114dd5d65c
Author: Dan McGee <dan@archlinux.org>
Date: Wed Aug 31 12:15:22 2011 -0700
genl: remove unused code
remove unused basename logic, avoid dereference of possibly NULL variable
commit 1313ceb4d668d7ea343acb0c573aeae17669ff54
Author: Dan McGee <dan@archlinux.org>
Date: Wed Aug 31 12:14:51 2011 -0700
iptuntap: avoid double open
would leak a file handle
commit 223f4d8ea6803bd9288d54c819e54a88a63c1730
Author: Eric W. Biederman <ebiederm@xmission.com>
Date: Fri Jul 15 14:29:41 2011 +0000
iproute2: Fail "ip netns add" on existing network namespaces.
Use O_EXCL so that we only create and mount a new network namespace
if there is no chance an existing network namespace is present.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
commit 2e8a07f543e6f48f0d0479e3dd4796c18f733e12
Author: Eric W. Biederman <ebiederm@xmission.com>
Date: Fri Jul 15 14:26:59 2011 +0000
iproute2: Auto-detect the presence of setns in libc
If libc has setns present use that version instead of
rolling the syscall wrapper by hand.
Dan McGee found the following compile error:
gcc -D_GNU_SOURCE -O2 -Wstrict-prototypes -Wall -I../include
-DRESOLVE_HOSTNAMES -DLIBDIR=\"/usr/lib/\" -c -o ipnetns.o ipnetns.c
ipnetns.c:31:12: error: static declaration of ‘setns’ follows non-static
declaration
/usr/include/bits/sched.h:93:12: note: previous declaration of ‘setns’
was here
make[1]: *** [ipnetns.o] Error 1
Reported-by: Dan McGee <dan@archlinux.org>
Tested-by: Dan McGee <dan@archlinux.org>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
commit 0f28c38b34fbfe97a3f0e84871d6dde737b597a9
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Aug 31 11:00:26 2011 -0700
Update headers to 3.0.4
Update the automatically generated sanitized headers
commit 44e743e588bcc737b7a2a5891f90279c58934ad7
Author: Dan McGee <dan@archlinux.org>
Date: Fri Jul 15 08:52:24 2011 +0000
Make iproute2 configure script more flexible
On Arch Linux, we still install the iptables shared libraries in
/usr/lib/iptables/, even though the main library is installed to
/usr/lib/libxtables.so. This change checks all available locations to
correctly find the iptables library directory.
Signed-off-by: Dan McGee <dan@archlinux.org>
commit 05fb9184f2129c50cd0e406e9eda80509307af25
Author: Florian Westphal <fw@strlen.de>
Date: Wed Jul 27 06:47:05 2011 +0000
tc: filter: fix default 'protocol all' on little-endian platforms
when specifiying filters without 'protocol' keyword, tc will
default to 'protocol all'.
Unfortunately, this missed a byte-ordering conversion.
commit f9eab60d175a326e532b9b12534651db951c51b8
Author: Dan McGee <dan@archlinux.org>
Date: Wed Aug 31 10:51:42 2011 -0700
iproute2: Remove ChangeLog
This hasn't been updated since 2006.
commit 75dbf137916a2356807edf12c84e4e906277dd3b
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Aug 31 10:45:04 2011 -0700
Add LLDP to ethernet type table
and make type table const.
commit 610b22a30fbb8eaa8092337676119d03419a27bb
Author: Florian Westphal <fw@strlen.de>
Date: Mon Aug 1 11:23:37 2011 +0000
tc: man: update sfq man page
Document 'divisor' option and mention that external classifiers can be used.
commit b1978178facdfbce8d4dd6dec3a0e732fd258a75
Author: Florian Westphal <fw@strlen.de>
Date: Sun Aug 28 10:35:43 2011 +0000
tc: man: add man page for choke scheduler
commit ed0f006b869b69c4c05915a31da1ffaaf189c8c0
Author: Bin Li <libin.charles@gmail.com>
Date: Wed Aug 31 10:42:00 2011 -0700
ip: fix typo in ip link manual page
Extra bracket
commit c0c44bfedda05e52572cc16c9d7777e1077d86cf
Author: Andreas Henriksson <andreas@fatal.se>
Date: Wed Jul 20 17:08:14 2011 +0200
iproute2: Remove "monitor" from "ip route help" output
$ ip route help 2>&1 | grep monitor
ip route { add | del | change | append | replace | monitor } ROUTE
$ ip route monitor
Command "monitor" is unknown, try "ip route help".
(I guess what was really intended is "ip monitor route", so just remove
the argument from the help output.)
Originally reported by martin f krafft at http://bugs.debian.org/537681
While at it, also drop all non-existant (route,link,netns) monitor
arguments from the ip(8) man page.
Signed-off-by: Andreas Henriksson <andreas@fatal.se>
commit c13f598242dd2b108016367ab318f15b0cf4db44
Author: Christoph Biedl <debian.axhn@manchmal.in-ulm.de>
Date: Wed Jul 20 16:02:50 2011 -0700
ip: fix display of prefix cache info
The "ip monitor" command does properly decode the "preferred" and
"valid" lifetime records in router advertisements from netlink
messages.
commit c441bd4c1be614c022bc7a2b8804ad368d7bb484
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Fri Jan 7 09:43:27 2011 -0800
Add QFQ scheduler
Basic configuration support for QFQ.
Still need to add manual page.
commit be181323c1724e6a5e3b296816d00d9151ae65ff
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Jul 13 09:49:17 2011 -0700
Remove redundant limits.h
redo.
commit 0dc34c7713bb7055378fe5cbc720d63d0db572a1
Author: Eric W. Biederman <ebiederm@xmission.com>
Date: Wed Jul 13 09:48:26 2011 -0700
iproute2: Add processless network namespace support
The goal of this code change is to implement a mechanism such that it is
simple to work with a kernel that is using multiple network namespaces
at once.
This comes in handy for interacting with vpns where there may be rfc1918
address overlaps, and different policies default routes, name servers
and the like.
Configuration specific to a network namespace that would ordinarily be
stored under /etc/ is stored under /etc/netns/<name>. For example if
the dns server configuration is different for your vpn you would create
a file /etc/netns/myvpn/resolv.conf.
File descriptors that can be used to manipulate a network namespace can
be created by opening /var/run/netns/<NAME>.
This adds the following commands to iproute.
ip netns add NAME
ip netns delete NAME
ip netns monitor
ip netns list
ip netns exec NAME cmd ....
ip link set DEV netns NAME
ip netns exec exists to cater the vast majority of programs that only
know how to operate in a single network namespace. ip netns exec
changes the default network namespace, creates a new mount namespace,
remounts /sys and bind mounts netns specific configuration files to
their standard locations.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
commit 21a85d3becf45e02985c466764ae19433d907c40
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Jul 11 10:38:10 2011 -0700
Fix test for EOF on continuation line
getline() returns -1 on EOF, need to not loose that by forcing
result to size_t (unsigned).
Reported-by: Petr Sabata
commit e760a19a437997820f16846636c0db23faa6d3ba
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Jul 11 10:31:07 2011 -0700
Update kernel headers to 3.0
commit b5383aaac813099f88e13d0c7b5d32e05ac87e4e
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Jul 11 10:29:12 2011 -0700
Update .gitignore
commit 73de5d96804160e3e399bd81b135053f70b27e7b
Author: Andreas Henriksson <andreas@fatal.se>
Date: Mon Jul 4 05:17:42 2011 +0000
iproute2: Fix building xt module against xtables version 6
iptables/xtables apparently changed API again.... Now you need to pass
and extra parameter (orig_opts) which was not needed before.
Sprinkle some lovely pre-processor magic to be compatible with both older
and new versions. In the beginning of times XTABLES_VERSION_CODE didn't
exist. Then it was (0x10000 * major + 0x100 * minor + patch) when it was
first introduced (according to git), but now it's at 6...
Don't know what official iptables releases has defined it to over time.
Lets just hope none of the older versions with is has the define
higher then 6 is still around.... so only the "current" versioning
scheme is supported.... lets see how long this lasts now.
For the API change in xtables, see:
http://git.netfilter.org/cgi-bin/gitweb.cgi?p=iptables.git;a=commitdiff;h=600f38db82548a683775fd89b6e136673e924097
Signed-off-by: Andreas Henriksson <andreas@fatal.se>
commit 5582c0cffd5b65def21eca6ef0b7c165cb2f9523
Author: Petr Sabata <contyk@redhat.com>
Date: Fri Jun 10 03:19:07 2011 +0000
iproute2: Remove unreachable code
This patch removes unreachable, useless code.
Signed-off-by: Petr Sabata <contyk@redhat.com>
commit cbec0219132afd1749e1b8852b8b3729988af841
Author: David Ward <david.ward@ll.mit.edu>
Date: Sat Jun 11 16:13:30 2011 +0000
xfrm: Update documentation
The ip(8) man page and the "ip xfrm [ XFRM-OBJECT ] help" command output
are updated to include missing options, fix errors, and improve grammar.
There are no functional changes made.
The documentation for the ip command has many different meanings for the
same formatting symbols (which really needs to be fixed). This patch makes
consistent use of brackets [ ] to indicate optional parameters, pipes | to
mean "OR", braces { } to group things together, and dashes - instead of
underscores _ inside of parameter names. The parameters are listed in the
order in which they are parsed in the source code.
There are several parameters and options that are still not mentioned or
need to be described more thoroughly in the "COMMAND SYNTAX" section of
the ip(8) man page. I would appreciate help from the developers with this.
Signed-off-by: David Ward <david.ward@ll.mit.edu>
commit 4f69c63a4b85745898c54f5aee624774f28ca0a2
Author: Gilles Espinasse <g.esp@free.fr>
Date: Sun Jul 10 05:45:37 2011 +0000
iproute2: fix minor typo in comments
Signed-off-by: Gilles Espinasse <g.esp@free.fr>
commit 8acd148fab1256132bd00353629868a561a8581c
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Jun 29 16:01:48 2011 -0700
v2.6.39
commit 49dff8c88c7a5d448bcce2ed2c42dd5d542b82c3
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Jun 29 15:59:41 2011 -0700
xt match: fix set-never-used warning
commit 02ee3dbc783b926c7846de4b37ce5c577336b054
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Jun 29 15:59:02 2011 -0700
skbedit: fix set-never-used warning
commit 18445b3e92ae9c7dd7effe191200d5a1a784388b
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Jun 29 15:58:37 2011 -0700
ss: check result of readlink
Don't ignore readlink failure.
commit dc484542a9d8d91db006af8a73d9ecddfef8f883
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Jun 29 15:58:12 2011 -0700
Fix set-never-used warning in ifstat
commit 2dd9f8e073717aed2b624d1e9e325487260b57eb
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Jun 20 14:34:46 2011 -0700
libnetlink: fix set never used warning
commit bf808cbf84bd96974b5a7d11484e8b0d46a467e8
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Jun 20 14:34:30 2011 -0700
tc: fix set never used warning in red
commit d93b6b51e6a2bc6f2a3e7710d89cef659276c17d
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Jun 20 14:34:11 2011 -0700
ip: iproute fix set never used warning
commit cdf3585224fe8042582c27825eb29763d7dedcf9
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Mon Jun 20 14:33:55 2011 -0700
ip: addrlabel fix set never used warning
commit df39de8d2485d24bf5e64201dae191e9ed6ccb0e
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Mon Jun 20 14:31:51 2011 -0700
ss: fix autobound filter
Fixes following error. We currently provide garbage data to kernel, that
can abort the validation process or produce unexpected results.
$ ss -a autobound
State Recv-Q Send-Q Local Address:Port Peer Address:Port
TCPDIAG answers: Invalid argument
After patch:
$ misc/ss -a autobound
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 *:44624 *:*
ESTAB 0 0 192.168.1.21:47141 74.125.79.109:imaps
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit bcd7abddd4962f01f35eb644702c9abdf4c81d0e
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu May 19 09:19:17 2011 -0700
tc filter: fix dport/sport in pretty print output
Problem reported by Peter Lebbing on Debian.
The decode of source and destination port filters in pretty print
mode was backwards.
commit f78e316f25f8795e3e2b8d05ce2ecb908b62db9c
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Thu Oct 22 18:13:21 2009 +0000
ip: Support IFLA_TXQLEN in ip link command
Eric Dumazet a écrit :
> We currently use an expensive ioctl() to get device txqueuelen, while
> rtnetlink gave it to us for free. This patch speeds up ip link operation
> when many devices are registered.
>
Here is a 2nd version od this patch, not displaying "qlen 0" useless info
[PATCH iproute2] ip: Support IFLA_TXQLEN in ip link show command
We currently use an expensive ioctl() to get device txqueuelen, while
rtnetlink gave it to us for free. This patch speeds up ip link operation
when many devices are registered.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit 892eba309fab1bad2a15868163c0d10b6ed88592
Author: John Fastabend <john.r.fastabend@intel.com>
Date: Tue Apr 26 12:44:42 2011 -0700
iproute2: improve mqprio inputs for queue offsets and counts
This changes mqprio input format to be more user friendly.
Old usage,
# ./tc/tc qdisc add dev eth3 root mqprio help
Usage: ... mqprio [num_tc NUMBER] [map P0 P1...]
[offset txq0 txq1 ...] [count cnt0 cnt1 ...] [hw 1|0]
New usage,
# ./tc/tc qdisc add dev eth3 root mqprio help
Usage: ... mqprio [num_tc NUMBER] [map P0 P1 ...]
[queues count1@offset1 count2@offset2 ...] [hw 1|0]
Suggested-by: Ben Hutchings <bhutchings@solarflare.com>
Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
commit 4d91e4f168025d7051291bcc23f0f7a853ab74f8
Merge: 21cfb5e 242b8da
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Tue Apr 12 14:42:20 2011 -0700
Merge branch 'for-2.6.39' of /home/shemminger/iproute2-net-next
Conflicts:
include/linux/xfrm.h
ip/iplink.c
commit 242b8da71be73204500cc85613a399d6968f23af
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Tue Apr 12 14:40:14 2011 -0700
Use INIT_NETDEV_GROUP
Now that headers are sanitized, use the define.
commit c0635644cd0a4471c09f665f7098713f3157c170
Author: Ulrich Weber <uweber@astaro.com>
Date: Thu Apr 7 09:37:05 2011 +0200
iproute2: parse flag XFRM_POLICY_ICMP
parse flag XFRM_POLICY_ICMP
Signed-off-by: Ulrich Weber <uweber@astaro.com>
commit 7b032a1f773ed5f17e16c1feff8b0a124d5db98d
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Mar 23 12:29:17 2011 -0700
Update README information
Change url's and describe current kernel header values.
commit 914953046aac346b16143eee1c04b8a49bec8c8e
Author: John Fastabend <john.r.fastabend@intel.com>
Date: Tue Apr 12 08:57:27 2011 -0700
iproute2: tc add mqprio qdisc support
Add mqprio qdisc support. Output matches the following,
qdisc mq 0: dev eth1 root
qdisc mq 0: dev eth2 root
qdisc mqprio 8001: dev eth3 root tc 8 map 0 1 2 3 4 5 6 7 1 1 1 1 1 1 1 1
queues:(0:7) (8:15) (16:23) (24:31) (32:39) (40:47) (48:55) (56:63)
And usage is,
Usage: ... mclass [num_tc NUMBER] [map P0 P1...]
[offset txq0 txq1 ...] [count cnt0 cnt1 ...] [hw 1|0]
Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
commit 27b3f524443ec617b125fcecb36ad1bc25268b72
Author: Brandon Philips <bphilips@suse.de>
Date: Fri Mar 25 14:43:44 2011 -0700
doc: add pdf targets
Hello Stephen-
Here is one more patch that SUSE has been carrying.
Cheers, Brandon
commit d7f3299d591e31f84ea3b8d4549d4019da1f9a7b
Author: Juliusz Chroboczek <Juliusz.Chroboczek@pps.jussieu.fr>
Date: Thu Mar 24 18:44:09 2011 +0100
tc : SFB flow scheduler
Supports SFB qdisc (included in linux-2.6.39)
1) Setup phase : accept non default parameters
2) dump information
qdisc sfb 11: parent 1:11 limit 1 max 25 target 20
increment 0.00050 decrement 0.00005 penalty rate 10 burst 20 (600000ms 60000ms)
Sent 47991616 bytes 521648 pkt (dropped 549245, overlimits 549245 requeues 0)
rate 7193Kbit 9774pps backlog 0b 0p requeues 0
earlydrop 0 penaltydrop 0 bucketdrop 0 queuedrop 549245 childdrop 0 marked 0
maxqlen 0 maxprob 0.00000 avgprob 0.00000
Signed-off-by: Juliusz Chroboczek <Juliusz.Chroboczek@pps.jussieu.fr>
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit 876cd7fa1001c538f6d2211745ac396d32659b2b
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Mar 23 12:34:21 2011 -0700
Add README.devel
commit 59a935d2045b233539a2d0be00310d355a9e0ebd
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Wed Mar 23 12:29:06 2011 -0700
Update email address of netem
commit 1f7190db3920f76cca7fdcd1bb318c6cfa4a3266
Author: Brandon Philips <bphilips@suse.de>
Date: Wed Mar 23 12:03:49 2011 -0700
ip: fix memory leak in ipmaddr.c
If the continue is taken, then there is a memory leak.
https://bugzilla.novell.com/show_bug.cgi?id=538996
Reported-by: David Binderman <dcb314@hotmail.com>
Signed-off-by: Brandon Philips <bphilips@suse.de>
commit d7ac9ad4f480d6e162165ec3f2c8e1bf50003ec3
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Wed Mar 9 10:42:35 2011 -0800
Fix warning in u32 from assignment in conditional
commit 8988b02ee1d04fdf07b913454b8d4e7b5e3092e5
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Wed Mar 9 10:41:44 2011 -0800
Fix snprintf with non format
snprintf was being called with environment variable.
If variable had format string (like %s) then program would crash.
commit 38c867d2a82d6f2b60450550fbaaadc5d9c77579
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Wed Mar 9 10:41:09 2011 -0800
Add checks for fgets() when reading proc
If expected proc headers are missing, catch and print error.
commit 46dc73a57d569bc036c36d922f2699e725b5c1aa
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Wed Mar 9 10:39:17 2011 -0800
Add no-strict-aliasing to genl
The genl code uses constructs which violate the strict aliasing
constraints of gcc 4.4. Disable the optimization to avoid warnings
and potential breakage.
commit 21cfb5e1d9dfce7612ba622bcaf8e301268a35c8
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Tue Apr 12 14:20:01 2011 -0700
update to 2.6.39-rc3 headers
commit ac694c333fc543e3ff4b9bc672811a83c3223658
Author: Vlad Dogaru <ddvlad@rosedu.org>
Date: Wed Feb 2 20:23:40 2011 +0200
iproute2: support listing devices by group
User can specify device group to list by using the group keyword:
ip link show group test
If no group is specified, 0 (default) is implied.
Signed-off-by: Vlad Dogaru <ddvlad@rosedu.org>
commit 77d1e6ab8426c2067616e193800cc201a5dbef47
Author: Stephen Hemminger <shemminger@vyatta.com>
Date: Thu Mar 17 10:05:47 2011 -0700
v2.6.38.1
commit aba383448c2e0c5442c14937b03b02fbbb5be3d1
Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Date: Tue Jan 11 06:32:46 2011 +0000
iproute2: allow to specify truncation bits on auth algo
Hi,
here is a patch against iproute2 to allow user to set a state with a specific
auth length.
Example:
$ ip xfrm state add src 10.16.0.72 dst 10.16.0.121 proto ah spi 0x10000000
auth-trunc "sha256" "azertyuiopqsdfghjklmwxcvbn123456" 96 mode tunnel
$ ip xfrm state
src 10.16.0.72 dst 10.16.0.121
proto ah spi 0x10000000 reqid 0 mode tunnel
replay-window 0
auth-trunc hmac(sha256)
0x617a6572747975696f707173646667686a6b6c6d77786376626e313233343536 96
sel src 0.0.0.0/0 dst 0.0.0.0/0
Regards,
Nicolas
>From 522ed7348cdf3b6f501af2a5a5d989de1696565a Mon Sep 17 00:00:00 2001
From: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Date: Thu, 23 Dec 2010 06:48:12 -0500
Subject: [PATCH] iproute2: allow to specify truncation bits on auth algo
Attribute XFRMA_ALG_AUTH_TRUNC can be used to specify
truncation bits, so we add a new algo type: auth-trunc.
Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
commit 2c19bf6aafc4e4d58de2baab7e0a90cec1f8adc0
Author: Vlad Dogaru <ddvlad@rosedu.org>
Date: Wed Jan 26 07:35:27 2011 +0000
iproute2: fix man page whitespace
Signed-off-by: Vlad Dogaru <ddvlad@rosedu.org>
commit db6b0cfa518de3b27c05bdf3efe05a7f77c4d97d
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date: Fri Feb 25 12:54:37 2011 -0800
iproute: rename 'get_jiffies' since it uses msecs
The get_jiffies() function retrieves rtt-type values in units of
milliseconds. This patch updates the function name accordingly,
following the pattern given by dst_metric() <=> dst_metric_rtt().
commit fca1dae821d627101914c36c9282fc244cd92744
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date: Fri Feb 25 12:51:48 2011 -0800
iproute: fix unit conversion of rtt/rttvar/rto_min
Since July 2008 (2.6.27, c1e20f7c8b9), the kernel stores the values for
RTAX_{RTT{,VAR},RTO_MIN} in milliseconds. When using a kernel > 2.6.27 with
the current iproute2, conversion of these values is broken in either way.
This patch
* updates the code to pass and retrieve milliseconds;
* since values < 1msec would be rounded up, also drops the usec/nsec variants;
* since there is no way to query kernel HZ, also drops the jiffies variant.
Arguments such as
rtt 3.23sec
rto_min 0xff
rto_min 0.200s
rttvar 25ms
now all work as expected when reading back previously set values.
commit 897fb84fd9b872a544076f88430bc35fc12b7cc8
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date: Tue Dec 21 12:54:09 2010 +0100
utils: get_jiffies always uses base=0
get_jiffies() is in all places called in the same manner, with base=0;
simplify argument list by putting the constant value into the function.
commit 4bb75da2d02ff16af775de0b2d12d07240c73eab
Author: Joy Latten <jml@austin.ibm.com>
Date: Wed Feb 2 17:32:59 2011 -0600
xfrm security context support
Adds security context support to ip xfrm state.
Signed-off-by: Joy Latten <latten@austin.ibm.com>
commit e5055b591b60e8627fcb18035ef80cf88c48fb7c
Author: Joy Latten <jml@austin.ibm.com>
Date: Wed Feb 2 17:32:18 2011 -0600
xfrm security context support
Adds security context support to ip xfrm policy.
Signed-off-by: Joy Latten <latten@austin.ibm.com>
commit 2c319e1ab7ebd371c0230f549890ae6c8ba49c8e
Author: Joy Latten <jml@austin.ibm.com>
Date: Wed Feb 2 17:31:39 2011 -0600
xfrm security context support
In the Linux kernel, ipsec policy and SAs can include a
security context to support MAC networking. This feature
is often referred to as "labeled ipsec".
This patchset adds security context support into ip xfrm
such that a security context can be included when
add/delete/display SAs and policies with the ip command.
The user provides the security context when adding
SAs and policies. If a policy or SA contains a security
context, the changes allow the security context to be displayed.
For example,
ip xfrm state
src 10.1.1.6 dst 10.1.1.2
proto esp spi 0x00000301 reqid 0 mode transport
replay-window 0
auth hmac(digest_null) 0x3078
enc cbc(des3_ede) 0x6970763672656164796c6f676f33646573636263696e3031
security context root:system_r:unconfined_t:s0
Please let me know if all is ok with the patchset.
Thanks!!
regards,
Joy
Signed-off-by: Joy Latten <latten@austin.ibm.com>
commit f0612d566b8bb76866fa772076412d290ed4cf5e
Author: Sridhar Samudrala <sri@us.ibm.com>
Date: Wed Mar 16 17:01:58 2011 -0700
macvlan/macvtap: support 'passthru' mode
Add support for 'passthru' mode when creating a macvlan/macvtap device
which allows takeover of the underlying device and passing it to a KVM
guest using virtio with macvtap backend.
Only one macvlan device is allowed in passthru mode and it inherits
the mac address from the underlying device and sets it in promiscuous
mode to receive and forward all the packets.
Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>
commit fcae78992cab7bd267785b392b438306c621e583
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Tue Mar 15 19:27:36 2011 -0700
v2.6.38
commit 2230ac1d1871b121284cb163fdf54062663d1ceb
Author: Diego Elio Pettenò <flameeyes@gmail.com>
Date: Wed Mar 9 10:18:03 2011 -0800
Remove -L flags from link
While the previous code was supposed to work nonetheless, it could be
messed up if further -L were used in LDFLAGS to list the path where glibc's
libutil was to be found.
References: https://bugs.gentoo.org/347489
Signed-off-by: Diego Elio Pettenò <flameeyes@gmail.com>
commit 98f5519cd9db9d1ca58c49af27698101c8fff373
Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Date: Tue Feb 1 07:29:54 2011 -0500
iproute2: add support of flag XFRM_STATE_ALIGN4
Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
commit d5b7420a269e6e220e00cfbd69546d157fac1332
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Fri Feb 25 20:00:54 2011 -0800
Remove #ifdef's
The iproute package keeps its own headers so there is no need
of polluting code with #ifdef's
commit a1e191b90c35f5ef5d7dfba5ad8b5b7a7f57a421
Author: Jiri Pirko <jpirko@redhat.com>
Date: Fri Feb 25 19:55:19 2011 -0800
iplink: implement setting of master devic
commit f323f2a32c3b9c29fb91c812472b7fd663f9ae73
Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Date: Tue Jan 11 06:32:46 2011 +0000
iproute2: allow to specify truncation bits on auth algo
Hi,
here is a patch against iproute2 to allow user to set a state with a specific
auth length.
Example:
$ ip xfrm state add src 10.16.0.72 dst 10.16.0.121 proto ah spi 0x10000000
auth-trunc "sha256" "azertyuiopqsdfghjklmwxcvbn123456" 96 mode tunnel
$ ip xfrm state
src 10.16.0.72 dst 10.16.0.121
proto ah spi 0x10000000 reqid 0 mode tunnel
replay-window 0
auth-trunc hmac(sha256)
0x617a6572747975696f707173646667686a6b6c6d77786376626e313233343536 96
sel src 0.0.0.0/0 dst 0.0.0.0/0
Regards,
Nicolas
>From 522ed7348cdf3b6f501af2a5a5d989de1696565a Mon Sep 17 00:00:00 2001
From: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Date: Thu, 23 Dec 2010 06:48:12 -0500
Subject: [PATCH] iproute2: allow to specify truncation bits on auth algo
Attribute XFRMA_ALG_AUTH_TRUNC can be used to specify
truncation bits, so we add a new algo type: auth-trunc.
Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
commit 678b99ee6d80a1e80a3ee404dfb32c4bb3202827
Author: Vlad Dogaru <ddvlad@rosedu.org>
Date: Wed Jan 26 07:35:27 2011 +0000
iproute2: fix man page whitespace
Signed-off-by: Vlad Dogaru <ddvlad@rosedu.org>
commit f3f28c2126343fea70a697fc61392c433e0dc9e1
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Sun Jan 23 00:09:06 2011 +0000
sfq: add divisor support
In 2.6.39, we can build SFQ queues with a given hash table size,
commit 81d03dc356df24d55443535eace247b93ff47b4e
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date: Fri Feb 25 12:54:37 2011 -0800
iproute: rename 'get_jiffies' since it uses msecs
The get_jiffies() function retrieves rtt-type values in units of
milliseconds. This patch updates the function name accordingly,
following the pattern given by dst_metric() <=> dst_metric_rtt().
commit 9b2cdc00dab7b601938901e20b5e1e66188d388b
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date: Fri Feb 25 12:51:48 2011 -0800
iproute: fix unit conversion of rtt/rttvar/rto_min
Since July 2008 (2.6.27, c1e20f7c8b9), the kernel stores the values for
RTAX_{RTT{,VAR},RTO_MIN} in milliseconds. When using a kernel > 2.6.27 with
the current iproute2, conversion of these values is broken in either way.
This patch
* updates the code to pass and retrieve milliseconds;
* since values < 1msec would be rounded up, also drops the usec/nsec variants;
* since there is no way to query kernel HZ, also drops the jiffies variant.
Arguments such as
rtt 3.23sec
rto_min 0xff
rto_min 0.200s
rttvar 25ms
now all work as expected when reading back previously set values.
commit 94089ef7726cc25bffbd133fe5e1e16e0fd4654e
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date: Tue Dec 21 12:54:09 2010 +0100
utils: get_jiffies always uses base=0
get_jiffies() is in all places called in the same manner, with base=0;
simplify argument list by putting the constant value into the function.
commit 0c7a594541df84d3497681a8ecc09b05c1449dd0
Author: Joy Latten <jml@austin.ibm.com>
Date: Wed Feb 2 17:32:59 2011 -0600
xfrm security context support
Adds security context support to ip xfrm state.
Signed-off-by: Joy Latten <latten@austin.ibm.com>
commit e4f054f017d0daa7ff9bba6027c5df264999ff1a
Author: Joy Latten <jml@austin.ibm.com>
Date: Wed Feb 2 17:32:18 2011 -0600
xfrm security context support
Adds security context support to ip xfrm policy.
Signed-off-by: Joy Latten <latten@austin.ibm.com>
commit b2bb289a57fe7be63ebe0d1fe6ff94555bf6c936
Author: Joy Latten <jml@austin.ibm.com>
Date: Wed Feb 2 17:31:39 2011 -0600
xfrm security context support
In the Linux kernel, ipsec policy and SAs can include a
security context to support MAC networking. This feature
is often referred to as "labeled ipsec".
This patchset adds security context support into ip xfrm
such that a security context can be included when
add/delete/display SAs and policies with the ip command.
The user provides the security context when adding
SAs and policies. If a policy or SA contains a security
context, the changes allow the security context to be displayed.
For example,
ip xfrm state
src 10.1.1.6 dst 10.1.1.2
proto esp spi 0x00000301 reqid 0 mode transport
replay-window 0
auth hmac(digest_null) 0x3078
enc cbc(des3_ede) 0x6970763672656164796c6f676f33646573636263696e3031
security context root:system_r:unconfined_t:s0
Please let me know if all is ok with the patchset.
Thanks!!
regards,
Joy
Signed-off-by: Joy Latten <latten@austin.ibm.com>
commit db02608b6f408998ea8c823fb791cead3e574f50
Author: Vlad Dogaru <ddvlad@rosedu.org>
Date: Wed Feb 2 20:23:41 2011 +0200
iproute2: support device group semantics
Add the group keyword to ip link set, which has the following meaning:
If both a group and a device name are pressent, we change the device's
group to the specified one. If only a group is present, then the
operation specified by the rest of the command should apply on an entire
group, not a single device.
So, to set eth0 to the default group, one would use
ip link set dev eth0 group default
Conversely, to set all the devices in the default group down, use
ip link set group default down
Signed-off-by: Vlad Dogaru <ddvlad@rosedu.org>
commit 26ad3aecfeeb93cd396a199a5e664e749bcabc8d
Author: Vlad Dogaru <ddvlad@rosedu.org>
Date: Wed Feb 2 20:23:41 2011 +0200
iproute2: support device group semantics
Add the group keyword to ip link set, which has the following meaning:
If both a group and a device name are pressent, we change the device's
group to the specified one. If only a group is present, then the
operation specified by the rest of the command should apply on an entire
group, not a single device.
So, to set eth0 to the default group, one would use
ip link set dev eth0 group default
Conversely, to set all the devices in the default group down, use
ip link set group default down
Signed-off-by: Vlad Dogaru <ddvlad@rosedu.org>
commit f960c92aac1838e0f336c0ca0f657bb55a42d8e9
Author: Vlad Dogaru <ddvlad@rosedu.org>
Date: Wed Feb 2 20:23:40 2011 +0200
iproute2: support listing devices by group
User can specify device group to list by using the group keyword:
ip link show group test
If no group is specified, 0 (default) is implied.
Signed-off-by: Vlad Dogaru <ddvlad@rosedu.org>
commit dd4b25a0f9d696e29a12f6c25a87aace36ce6a15
Merge: 08dc32e 1551198
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Fri Feb 25 12:35:01 2011 -0800
Merge branch 'choke' into net-next
Conflicts:
include/linux/pkt_sched.h
commit 08dc32e13065a182551f3e034db8ad6ad3390c62
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Fri Feb 25 12:31:36 2011 -0800
update to net-next (2.6.39) headers
commit 1551198b40d0ea8abd9dc3072386dc78d05b6bbc
Merge: a4eca97 1598b9e
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Sun Feb 20 12:35:40 2011 -0800
Merge branch 'master' into choke
commit a4eca97cff0391d73b4ad4d5598cdc9a35771fa4
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Thu Jan 13 09:23:17 2011 -0800
CHOKe scheduler
TC commands for CHOKe qdisc
commit 1598b9ef7b6704af5126d632e324323703ca8112
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Thu Jan 13 14:53:02 2011 -0800
Revert "iproute2: add VF_PORT support"
This reverts commit 632110aa0db4518b33fc09189ffcdd1b2e2e1762.
There seem to be some recent changes in the 802.1Qbh/bg specs which may
result in changes to this patch in the near future. It seems like its best
to ignore this patch for now.
I will re-spin at a later time when the changes in the specs converge.
BTW, Please let me know if I should CC netdev list and others on the
original email. I can resend this email.
Thanks,
Roopa
commit 632110aa0db4518b33fc09189ffcdd1b2e2e1762
Author: Roopa Prabhu <roprabhu@cisco.com>
Date: Tue Nov 9 14:47:52 2010 +0000
iproute2: add VF_PORT support
Resubmitting Scott Feldmans original patch with below changes
- Fix port profile strlen which was off by 1
- Added function to convert IFLA_PORT_RESPONSE codes to string
Add support for IFLA_VF_PORTS. VF port netlink msg layout is
[IFLA_NUM_VF]
[IFLA_VF_PORTS]
[IFLA_VF_PORT]
[IFLA_PORT_*], ...
[IFLA_VF_PORT]
[IFLA_PORT_*], ...
...
[IFLA_PORT_SELF]
[IFLA_PORT_*], ...
The iproute2 cmd line for link set is now:
Usage: ip link add link DEV [ name ] NAME
[ txqueuelen PACKETS ]
[ address LLADDR ]
[ broadcast LLADDR ]
[ mtu MTU ]
type TYPE [ ARGS ]
ip link delete DEV type TYPE [ ARGS ]
ip link set DEVICE [ { up | down } ]
[ arp { on | off } ]
[ dynamic { on | off } ]
[ multicast { on | off } ]
[ allmulticast { on | off } ]
[ promisc { on | off } ]
[ trailers { on | off } ]
[ txqueuelen PACKETS ]
[ name NEWNAME ]
[ address LLADDR ]
[ broadcast LLADDR ]
[ mtu MTU ]
[ netns PID ]
[ alias NAME ]
[ port MODE { PROFILE | VSI } ]
[ vf NUM [ mac LLADDR ]
[ vlan VLANID [ qos VLAN-QOS ] ]
[ rate TXRATE ]
[ port MODE { PROFILE | VSI } ] ]
ip link show [ DEVICE ]
TYPE := { vlan | veth | vcan | dummy | ifb | macvlan | can }
MODE := { assoc | preassoc | preassocrr | disassoc }
PROFILE := profile PROFILE
[ instance UUID ]
[ host UUID ]
VSI := vsi mgr MGRID type VTID ver VER
[ instance UUID ]
Signed-off-by: Scott Feldman <scofeldm@cisco.com>
Signed-off-by: Roopa Prabhu <roprabhu@cisco.com>
commit 9351fec72d2bb4e7501c12949855ab252b037bce
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Wed Jan 12 18:46:54 2011 -0800
Update to lasest kernel headers
commit f2c45d705036969027c63312a91e6e5713ff9376
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Fri Jan 7 09:54:30 2011 -0800
v2.6.37
commit 8552b387df5ff1c1df2b0a8e6585b53928838471
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Wed Dec 29 15:05:48 2010 -0800
Update to 2.6.37-rc8 headers
Use sanitized headers from 2.6.37-rc8
commit 5c68fc88c5c4346d4d80dddb79b453796ab9b4d2
Author: Petr Sabata <psabata@redhat.com>
Date: Thu Dec 16 17:24:54 2010 +0100
ip: Few typo and grammar errors fixes for ip(8) manpage
commit 4b3385f6c593b2a37a3ee5dca3a8dbc1d1392d86
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Fri Dec 10 11:49:29 2010 -0800
Cleanup ll_map
In preparation for adding name hash:
* add const
* use same types in cache as ifinfomsg
* rename idxmap to ll_cache
commit 30564237282c497649f04b20e791de420004e3a5
Author: Octavian Purdila <opurdila@ixiacom.com>
Date: Fri Dec 10 16:59:50 2010 +0200
iproute2: initialize the ll_map only once
Avoid initializing the LL map (which involves a costly RTNL dump)
multiple times. This can happen when running in batch mode.
Signed-off-by: Octavian Purdila <opurdila@ixiacom.com>
commit 1e21ea71a7e12e6bd06ece8cf415e7a5f372c806
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Fri Dec 10 09:46:24 2010 -0800
Increase size of ifindex hash heads
The default of 16 is too small for users with 10,000 interfaces.
commit 1da5f6b2ca916400a2cb6ef59608c6c9d5b90c8c
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date: Thu Dec 9 09:39:47 2010 -0800
tc-red: typo in man page
commit d98e300c335a13927ed352c6bd02547b363ec0ec
Author: Petr Sabata <psabata@redhat.com>
Date: Wed Dec 8 14:49:09 2010 +0100
ss: Change "do now" to "do not" in ss(8), -n option
A small typo fix.
commit f4ff11e3e298d457c4f30813e305f7d27d89823a
Author: Dan Smith <danms@us.ibm.com>
Date: Wed Dec 1 11:24:58 2010 -0800
Add ip route save/restore
This patch adds save and restore commands to "ip route". Save dumps
the RTNL stream to stdout which can then be passed to restore later.
This may be helpful in some normal situations, and will allow C/R to
migrate the routing information in userspace. Tweaking of the stream
can be done by userspace helpers to convert between versions and adjust
things like device indexes when restoring routes in a different
environment.
By factoring out some of the common bits of print_route() into
filter_nlmsg(), the "save" command can use the same selection logic
as "list," allowing the caller to save only specific routes as
necessary.
The only change since the RFC is the addition of manpage and doc
material.
Signed-off-by: Dan Smith <danms@us.ibm.com>
commit 3822cc986cc33751b82a22b91289ef088d94440c
Author: Gregoire Baron <baronchon@n7mm.org>
Date: Wed Dec 1 11:17:46 2010 -0800
tc: add ACT_CSUM action support (csum)
Add the iproute2 support for the ACT_CSUM action. Can be used as
following, certainly in conjunction with the ACT_PEDIT action (pedit):
# In order to DNAT (stateless) IPv4 packet from 192.168.1.100 to
# 0x12345678 (18.52.86.120), and update the IPv4 header checksum and
# the UDP checksum (the last one, only if the packet is UDP).
tc filter add eth0 prio 1 protocol ip parent ffff: \
u32 match ip src 192.168.1.100/32 flowid :1 \
action pedit munge offset 16 u32 set 0x12345678 \
pipe csum ip and udp
# In order to alter destination address of IPv6 TCP packets from fc00::1
# and correct the TCP checksum (nothing happened? except maybe for
# checksums in the TCP payload ...).
tc filter add eth0 prio 1 protocol ipv6 parent ffff: \
u32 match ip6 src fc00::1/128 match ip6 protocol 0x06 0xff flowid :1 \
action pedit munge offset 24 u32 set 0x12345678 \
pipe csum tcp
commit 64c7956061500611061910067d76512afcd2ddb4
Author: Ben Greear <greearb@candelatech.com>
Date: Wed Dec 1 11:13:51 2010 -0800
Allow 'ip addr flush' to loop more than 10 times
The default remains at 10 for backwards compatibility.
For instance:
# ip addr flush dev eth2
*** Flush remains incomplete after 10 rounds. ***
# ip -l 20 addr flush dev eth2
*** Flush remains incomplete after 20 rounds. ***
# ip -loops 0 addr flush dev eth2
#
This is useful for getting rid of large numbers of IP
addresses in scripts.
Signed-off-by: Ben Greear <greearb@candelatech.com>
commit 3f0a7b4c4f0a6c5462ad55b7fa4445c2d485f435
Author: Sridhar Samudrala <sri@us.ibm.com>
Date: Thu Oct 28 13:10:40 2010 +0000
Support 'mode' parameter when creating macvtap device
Add support for 'mode' parameter when creating a macvtap device.
This allows a macvtap device to be created in bridge, private or
the default vepa modes.
Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>
-------------------------------------------------------------------
Acked-by: Arnd Bergmann <arnd@arndb.de>
commit f66efadd79f75c61642d90e0b64081b4e0edf61c
Author: Andreas Schwab <schwab@linux-m68k.org>
Date: Fri Nov 5 23:26:29 2010 +0000
iproute2: remove useless use of buffer
Print directly to the file instead of going through a buffer.
Signed-off-by: Andreas Schwab <schwab@linux-m68k.org>
commit 7162c921488de9093c522b858a1ab488b8f50c96
Author: Changli Gao <xiaosuo@gmail.com>
Date: Sat Aug 21 06:30:01 2010 +0000
iproute2: tc: f_flow: add key rxhash
We can use rxhash to classify the traffic into flows. As rxhash maybe
supplied by NIC or RPS, it is cheaper.
Signed-off-by: Changli Gao <xiaosuo@gmail.com>
Acked-by: Jamal Hadi Salim <hadi@cyberus.ca>
commit 4a9608e6aefe40cf8545097ed23931f9bacba06d
Author: Timo Teräs <timo.teras@iki.fi>
Date: Tue Nov 23 22:18:58 2010 +0000
iproute2: support xfrm upper protocol gre key
Similar to tunnel side: accept dotted-quad and number formats.
Use regular number for printing the key.
Signed-off-by: Timo Teräs <timo.teras@iki.fi>
commit 6f4f7c464ad4121582594f03163c2b5f324d4b4b
Author: Timo Teräs <timo.teras@iki.fi>
Date: Tue Nov 23 22:18:57 2010 +0000
iproute2: treat gre key as number
Print GRE key as a regular number. It is not really an IPv4 address
and this is also how Cisco and Juniper treats GRE keys. Do keep the
parsing of dotted-quad format for backwards compatibility.
Signed-off-by: Timo Teräs <timo.teras@iki.fi>
commit be3c4d4f3c14875e459d27b8b095e29af8591489
Author: Mike Frysinger <vapier@gentoo.org>
Date: Sun Nov 21 16:16:54 2010 -0500
m_xt: stop using xtables_set_revision()
iptables dropped the xtables_set_revision() function around version 1.4.9,
so set the rev directly ourselves. This should be compatible back to the
original version m_xt itself is designed for.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
commit 5d8056357a032131057462fadb77c62cab6b2f0f
Author: Petr Sabata <psabata@redhat.com>
Date: Mon Nov 29 14:00:37 2010 +0100
ss(8) improvements by Jiri Popelka <jpopelka@redhat.com>
commit ea71beacacb9ebf756bbc250c71df59ec2f46243
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Sun Nov 28 10:35:28 2010 -0800
Use standard routines for interface name to index etc
Use the available libraries for mapping from interface index to name
or type. This should speed up display with lots of interfaces
commit 82408fc17dcc44ccfad82ad7ae00fc815b311b98
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Thu Nov 18 15:25:38 2010 -0800
Workaround for repeated distclean
The subdirectory makefiles need Config file to exist.
Therefore create it, then run make clean, then remove it.
commit 3f5c1a01e6bc15593635705aa0b19dcac965be26
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Wed Oct 20 17:38:04 2010 -0700
Update to 2.6.36 headers
Use santized headers from 2.6.36 release
commit 66abc090724a14baa0b931ecab4ea22ce91c4fb0
Author: Ulrich Weber <uweber@astaro.com>
Date: Mon Sep 13 08:23:01 2010 -0700
iproute2: display xfrm socket policy direction
display socket policy direction
Signed-off-by: Ulrich Weber <uweber@astaro.com>
commit cb4bd0ec8dcba856d1ebf8b3f72b79f669dad0f4
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Wed Aug 25 09:04:55 2010 -0700
Fix GRED options clearing
Bug reported where priorities of GRED DP's are ignored.
The option parsing sets opt then memset was clearing these
values.
commit a571587d0b27a2c1492019c3abeb6fb0c0e606ce
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Mon Aug 23 21:44:56 2010 +0200
iproute2: add 64bit support to ifstat
Le lundi 23 août 2010 à 10:33 -0700, Stephen Hemminger a écrit :
> I think this breaks the wraparound detection code in this command.
>
>
OK lets fix the bug only, before adding 64bit counters capabilities.
Thanks
[PATCH] iproute2: add 64bit arches support to ifstat
ifstat assumes IFLA_STATS fields are "unsigned long", but they are
__u32. This fix is needed to let ifstat run on 64bit arches.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit daf7bd5c73aa3b7c91d83abf500c8749bec6e6d5
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Mon Aug 23 09:13:05 2010 -0700
Use correct rt_link_statistics
In recent kernels, net_device_stats is not exposed and the code
shoulf have used rt_link_statistics. Also, fix use of sprintf
with user supplied value.
commit b0373bfbbcc82fa68d3c7f0507cf4b1d8c54268b
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date: Wed Jul 21 11:42:50 2010 +0200
ip: add RTA_MARK support
Adds support for RTA_MARK rt attribute added in linux-2.6.36
$ ip route get ADDR mark 4
192.168.20.110 dev eth1 src 192.168.20.108 mark 4
cache mtu 1500 advmss 1460 hoplimit 64
$ ip route get 192.168.20.108 from ADDR iif STRING mark 256
local 192.168.20.108 from 192.168.20.110 dev lo src 192.168.20.108 mark 0x100
cache <local,src-direct> iif eth1
$ ip route list cache [ADDR] mark NUMBER
Hexadecimal output if mark >= 16
null marks are not displayed.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
commit 04a9fc0a50f9a7677f22c9746cf2f4aadc2c8257
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Mon Aug 23 08:35:08 2010 -0700
Update kernel headers to 2.6.36-rc2
commit daa10c8af6031f10168639b7fd3c181a5d788ee1
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Mon Aug 23 08:14:38 2010 -0700
Snapshot for 2.6.35.1
commit c73f3e02f8ae25e5daad0367690a3069895dd8a3
Author: Ulrich Weber <uweber@astaro.com>
Date: Thu Aug 12 11:05:19 2010 +0200
iproute2: dont filter cached routes on iproute_get
iproute_get will return cloned routes for IPv4
and cloned as well non-cloned routes for IPv6.
Therefore RTM_F_CLONED flag should not be checked
for iproute_get routes. Check in print_route will
always fail because valid values are 0 and 1.
Signed-off-by: Ulrich Weber <uweber@astaro.com>
commit 3bc1c4f29777171b484d36abf673667e3729202b
Author: Ben Greear <greearb@candelatech.com>
Date: Mon Aug 16 10:00:08 2010 -0700
iproute2: Fix filtering related to flushing IP addresses.
The old 'ip addr flush' logic had several flaws:
* It reversed logic for primary v/s secondary flags
(though, it sort of worked right anyway)
* The code tried to remove secondaries and then primaries,
but in practice, it always removed one primary per loop,
which not at all efficient.
* The filter logic in the core would run only the first
filter in most cases.
* If you used '-s -s', the ifa_flags member would be
modified, which could make future filters fail
to function fine.
This patch attempts to fix all of these issues.
Tested-by: Brian Haley <brian.haley@hp.com>
Signed-off-by: Ben Greear <greearb@candelatech.com>
Change-Id: I813de16171179f4e1c985c340024c75dfc65ff23