Chander Govindarajan (2): json: update json output ordering to place rules after chains nft: simplify chain lookup in do_list_chain Florian Westphal (20): tests: add test case for flowtable with owner flag src: add tcp option reset support evaluate: init cmd pointer for new on-stack context src: copy field_count for anonymous object maps as well evaluate: make byteorder conversion on string base type a no-op evaluate: keep prefix expression length segtree: split prefix and range creation to a helper function evaluate: string prefix expression must retain original length src: make interval sets work with string datatypes segtree: add string "range" reversal support tests: add testcases for interface names in sets segtree: use correct byte order for 'element get' segtree: add support for get element with sets that contain ifnames netlink: remove unused argument from helper function src: allow use of base integer types as set keys in concatenations tests: add concat test case with integer base type subkey src: fix always-true assertions netlink: swap byteorder for host-endian concat data segtree: add pretty-print support for wildcard strings in concatenated sets sets_with_ifnames: add test case for concatenated range Jeremy Sowden (2): examples: add .gitignore file include: add missing `#include` Lukas Straub (2): meta: time: use uint64_t instead of time_t meta: fix compiler warning in date_type_parse() Martin Gignac (1): tests: py: Add meta time tests without 'meta' keyword Pablo Neira Ayuso (34): examples: compile with `make check' and add AM_CPPFLAGS optimize: fix vmap with anonymous sets optimize: more robust statement merge with vmap optimize: incorrect assert() for unexpected expression type optimize: do not merge unsupported statement expressions optimize: do not assume log prefix rule: Avoid segfault with anonymous chains expression: typeof verdict needs verdict datatype src: allow to use typeof of raw expressions in set declaration src: allow to use integer type header fields via typeof set declaration optimize: Restore optimization for raw payload expressions tests: py: add inet/vmap tests tests: py: extend meta time coverage src: add EXPR_F_KERNEL to identify expression in the kernel src: replace interval segment tree overlap and automerge src: remove rbtree datastructure mnl: update mnl_nft_setelem_del() to allow for more reuse intervals: add support to automerge with kernel elements evaluate: allow for zero length ranges intervals: support to partial deletion with automerge src: restore interval sets work with string datatypes intervals: unset EXPR_F_KERNEL for adjusted elements intervals: add elements with EXPR_F_KERNEL to purge list only intervals: fix deletion of multiple ranges with automerge intervals: build list of elements to be added from cache intervals: set on EXPR_F_KERNEL flag for new elements in set cache optimize: incorrect logic in verdict comparison optimize: do not clone unsupported statement optimize: merge nat rules with same selectors into map optimize: memleak in statement matrix intervals: deletion should adjust range not yet in the kernel netlink_delinearize: release last register on exit intervals: fix compilation --with-mini-gmp build: Bump version to 1.0.3 Phil Sutter (26): scanner: icmp{,v6}: Move to own scope scanner: igmp: Move to own scope scanner: tcp: Move to own scope scanner: synproxy: Move to own scope scanner: comp: Move to own scope. scanner: udp{,lite}: Move to own scope scanner: dccp, th: Move to own scopes scanner: osf: Move to own scope scanner: ah, esp: Move to own scopes scanner: dst, frag, hbh, mh: Move to own scopes scanner: type: Move to own scope scanner: rt: Extend scope over rt0, rt2 and srh scanner: monitor: Move to own Scope scanner: reset: move to own Scope scanner: import, export: Move to own scopes scanner: reject: Move to own scope scanner: flags: move to own scope scanner: policy: move to own scope scanner: nat: Move to own scope scanner: at: Move to own scope scanner: meta: Move to own scope scanner: dup, fwd, tproxy: Move to own scopes scanner: Fix for ipportmap nat statements tests: monitor: Hide temporary file names from error output tests: py: Don't colorize output if stderr is redirected intervals: Simplify element sanity checks Sam James (2): libnftables.map: export new nft_ctx_{get,set}_optimize API build: explicitly pass --version-script to linker