Florian Westphal (23): tests: json: add missing test case output tests: avoid warning and add missing json test cases json: add missing nat_type flag and netmap nat flag json: fix ip6 dnat test case after range to prefix transformation change parser: merge sack-perm/sack-permitted and maxseg/mss tcpopts: clean up parser -> tcpopt.c plumbing tcpopt: rename noop to nop tcpopt: split tcpopt_hdr_fields into per-option enum tcpopt: allow to check for presence of any tcp option tcp: add raw tcp option match support json: tcp: add raw tcp option match support exthdr: remove unused proto_key member from struct proto: reduce size of proto_desc structure src: add auto-dependencies for ipv4 icmp tests: fix exepcted payload of icmp expressions src: add auto-dependencies for ipv6 icmp6 tests: fix exepcted payload of icmpv6 expressions payload: auto-remove simple icmp/icmpv6 dependency expressions tests: icmp, icmpv6: avoid remaining warnings tests: ip: add one test case to cover both id and sequence tests: icmp, icmpv6: check we don't add second dependency nft: trace: print packet unconditionally json: don't leave dangling pointers on hlist Jeremy Sowden (3): doc: correct chain name in example of adding a rule tests: py: remove duplicate payloads. tests: py: update format of registers in bitwise payloads. Jose M. Guisado Gomez (5): evaluate: add netdev support for reject default tests: py: add netdev folder and reject.t icmp cases src: enable json echo output when reading native syntax monitor: add assignment check for json_echo monitor: fix formatting of if statements Pablo Neira Ayuso (19): tests: shell: exercise validation with nft -c parser_bison: allow to restore limit from dynamic set mnl: reply netlink error message might be larger than MNL_SOCKET_BUFFER_SIZE src: report EPERM for non-root users parser_bison: double close_scope() call for implicit chains tests: shell: timeouts later than 23 days build: search for python3 src: add support for multi-statement in dynamic sets and maps src: add set element multi-statement support src: disallow burst 0 in ratelimits tests: shell: set element multi-statement support src: set on flags to request multi-statement support cli: add libedit support cli: use plain readline() interface with libedit main: fix typo in cli definition include: resync nf_tables.h cache copy segtree: honor set element expiration evaluate: disallow ct original {s,d}ddr from maps build: Bump version to v0.9.8 Phil Sutter (8): tests/shell: Improve fix in sets/0036add_set_element_expiration_0 src: Support odd-sized payload matches src: Optimize prefix matches on byte-boundaries proto: Fix ARP header field ordering json: echo: Speedup seqnum_to_json() json: Fix seqnum_to_json() functionality doc: Document 'dccp type' match tests: py: Fix for changed concatenated ranges output