This causes dangling links in case the package is installed using
DESTDIR. Some package managers will report this as an error.

Hi jamal,

I found some spare time to play around a bit more with you ipt action stuff.

I've tested the patch attached with the testcase here below. It works
fine here. It fixes broken target option checkings (final_check) and a
leak in the merge_options function. I've killed copy_options since I
didn't find any reason why we need it.

--- test.sh ---
tc qdisc del dev wlan0 ingress
tc qdisc add dev wlan0 ingress
tc filter add dev wlan0 parent ffff: protocol ip prio 6 u32 \
match ip src 192.168.0.2/32 flowid 1:16 \
action ipt -j TOS --set-tos Maximize-Reliability
sleep 3
tc -s filter ls dev wlan0 parent ffff:
--- end of test.sh ---

Results:

tablename: mangle hook: NF_IP_PRE_ROUTING
         target: TOS set Maximize-Reliability  index 0
filter protocol ip pref 6 u32
filter protocol ip pref 6 u32 fh 800: ht divisor 1
filter protocol ip pref 6 u32 fh 800::800 order 2048 key ht 800 bkt 0
flowid 1:16
   match c0a80002/ffffffff at 12
         action order 1: tablename: mangle  hook: NF_IP_PRE_ROUTING
         target TOS set Maximize-Reliability
         index 18 ref 1 bind 1 installed 3 sec used 0 sec
         Action statistics:
         Sent 725 bytes 7 pkt (dropped 0, overlimits 0 requeues 0)
         rate 0bit 0pps backlog 0b 0p requeues 0

Now, check if options passed to the target are correct.

# tc filter add dev wlan0 parent ffff: protocol ip prio 6 u32 \
match ip dst 192.168.0.2/32 flowid 1:16 \
action ipt -j TOS --set-tos
                             ^^^
                         missing parameter

ipt: option `--set-tos' requires an argument
tc-ipt v0.1: TOS target: Parameter --set-tos is required
Try `tc-ipt -h' or 'tc-ipt --help' for more information.

btw, how's your schedule ? did you finally get spare time to come to the
netfilter workshop in seville ?

bye,
Pablo

Update include files and add support for TCP_CONG

It fixes flush feature for IPsec(ip xfrm).
Jamal gave me comment about it. I've tested it on 2.6.11.7.
Please find the log below, check code and pull it:

bk://bk.skbuff.net:38000/iproute2-xfrm-flush


ChangeSet@1.182, 2005-04-13 21:19:44+09:00, nakam@linux-ipv6.org
  [ip] add "deleteall" command for xfrm;
  "flush" uses kernel's flush interface and
  "deleteall" uses legacy iproute2's flush feature like
  getting-and-deleting-for-each.

One adds timestamp option (-t) to ip's monitoring
like `ip -t monitor` or `ip -t xfrm monitor`. This is commented by Jamal.
The other is a minor fix for xfrm monitor.

(Logical change 1.184)

  add more changelog entries about what in to last release

BKrev: 424da76d4z6qfhZ7QZX861nvo__l7w

BKrev: 424af537WSbjQwKNDk8rE7lj52TmkA

(Logical change 1.183)

(Logical change 1.182)

  iproute2-ss050330

BKrev: 424af399JQYu_2ttnS6tz5JSjXwvWQ

(Logical change 1.181)

(Logical change 1.181)

BKrev: 424af35291CI65EqxI1ospOYj74TPw

(Logical change 1.181)

2005/03/25 04:34:05-08:00 net[shemminger]!shemminger
Import patch p2_mirred

(Logical change 1.181)

BKrev: 424aedcbBvlxDe6AqCwiiD1p-LouEA

(Logical change 1.180)