Eugene Crosser (1): netlink: Use abort() in case of netlink_abi_error Florian Westphal (24): exthdr: fix type number saved in udata netlink_delinearize: use correct member type netlink_delinearize: rename misleading variable netlink_delinearize: binop: make accesses to expr->left/right conditional tcpopt: remove KIND keyword scanner: add tcp flex scope parser: split tcp option rules tcpopt: add md5sig, fastopen and mptcp options tests: py: add test cases for md5sig, fastopen and mptcp mnemonics mptcp: add subtype matching exthdr: fix tcpopt_find_template to use length after mask adjustment tests: py: add tcp subtype match test cases ipopt: drop unused 'ptr' argument exthdr: support ip/tcp options and sctp chunks in typeof expressions iptopt: fix crash with invalid field/type combo tests: add shift+and typeof test cases payload: skip templates with meta key set netlink_delinearize: and/shift postprocessing netlink_delinearize: zero shift removal evaluate: attempt to set_eval flag if dynamic updates requested src: silence compiler warnings json: add flow statement json export + parser parser_json: fix flowtable device datatype parser_json: permit empty device list Jeremy Sowden (18): proto: short-circuit loops over upper protocols evaluate: correct typo's evaluate: reject: support ethernet as L2 protocol for inet table tests: shell: remove stray debug flag. build: fix autoconf warnings build: remove scanner.c and parser_bison.c with `maintainer-clean` tests: py: fix inet/sets.t netdev payload tests: py: fix inet/ip.t payloads tests: py: fix inet/ip_tcp.t test netlink_delinearize: fix typo src: remove arithmetic on booleans src: reduce indentation src: simplify logic governing storing payload dependencies tests: py: fix inet/ip.t bridge payload src: add a helper that returns a payload dependency for a particular base src: store more than one payload dependency tests: py: remove redundant payload expressions tests: shell: remove redundant payload expressions Pablo Neira Ayuso (30): cache: do not skip populating anonymous set with -t mnl: different signedness compilation warning cli: remove #include cli: save history on ctrl-d with editline tests: shell: extend catchall tests for maps proto: revisit short-circuit loops over upper protocols erec: expose print_location() and line_location() src: error reporting with -f and read from stdin src: remove '$' in symbol_expr_print src: add ruleset optimization infrastructure optimize: merge rules with same selectors into a concatenation optimize: merge same selector with different verdict into verdict map optimize: merge several selectors with different verdict into verdict map src: do not use the nft_cache_filter object from mnl.c cache: do not set error code twice cache: add helper function to fill up the rule cache src: 'nft list chain' prints anonymous chains correctly libnftables: use xrealloc() parser_bison: missing synproxy support in map declarations optimize: add __expr_cmp() optimize: merge verdict maps with same lookup key optimize: check for payload base and offset when searching for mergers optimize: do not merge raw payload expressions iface: handle EINTR case when creating the cache examples: add libnftables example program examples: load ruleset from JSON netlink: check key is EXPR_CONCAT before accessing field segtree: memleak get element command build: Bump version to 1.0.2 build: missing SUBIRS update Phil Sutter (18): tests/py: Avoid duplicate records in *.got files exthdr: Fix for segfault with unknown exthdr mnl: Fix for missing info in rule dumps src: Fix payload statement mask on Big Endian meta: Fix {g,u}id_type on Big Endian meta: Fix hour_type size datatype: Fix size of time_type ct: Fix ct label value parser netlink_delinearize: Fix for escaped asterisk strings on Big Endian cache: Filter tables on kernel side cache: Filter rule list on kernel side cache: Filter chain list on kernel side cache: Filter set list on server side cache: Support filtering for a specific flowtable tests: py: Test connlimit statement scanner: Move 'maps' keyword into list cmd scope scanner: Some time units are only used in limit scope scanner: rt: Move seg-left keyword into scope Pierre Ducroquet (1): doc: add undefine and redefine keywords Stijn Tintel (1): parser: allow quoted string in flowtable_expr_member Štěpán Němec (1): tests: shell: better parameters for the interval stack overflow test