Alex Forster (1): json: fix 'add flowtable' command Derek Hageman (1): rule: check address family in set collapse Fernando Fernandez Mancera (8): json: add set statement list support json: add table map statement support json: fix json schema version verification json: fix empty statement list output in sets and maps json: add secmark object reference support json: add stateful object comment support py: support variables management and fix formatting doc: add nft_ctx_add_var() and nft_ctx_clear_vars() docs Florian Westphal (11): tests: shell: check for a tainted kernel expr: update EXPR_MAX and add missing comments evaluate: un-break rule insert with intervals evaluate: allow implicit ether -> vlan dep doc: mention vlan matching in ip/ip6/inet families evaluate: add ethernet header size offset for implicit vlan dependency tests: py: add vlan test case for ip/inet family netlink_delinearize: fix decoding of concat data element netlink_linearize: fix timeout with map updates tests: add a test case for map update from packet path with concat doc: add/update can be used with maps too Harald Welte (1): doc: payload-expression.txt: Mention that 'ih' exists Jeremy Sowden (3): segtree: refactor decomposition of closed intervals segtree: fix decomposition of unclosed intervals containing address prefixes doc, src: make some spelling and grammatical improvements Michael Braun (1): concat with dynamically sized fields like vlan id Pablo Neira Ayuso (31): optimize: merging concatenation is unsupported optimize: check for mergeable rules optimize: expand implicit set element when merging into concatenation src: allow burst 0 for byte ratelimit and use it as default tests/py: missing userdata in netlink payload include: resync nf_tables.h cache copy evaluate: bogus datatype assertion in binary operation evaluation evaluate: datatype memleak after binop transfer parser_bison: display too many levels of nesting error rule: do not display handle for implicit chain netlink_delinearize: do not transfer binary operation to non-anonymous sets tests: shell: deletion from interval concatenation netlink_delinearize: complete payload expression in payload statement payload: do not kill dependency for proto_unknown optimize: handle prefix and range when merging into set + concatenation doc: document a few reset commands supported by the parser doc: no reset support for limit monitor: missing cache and set handle initialization src: support for selectors with different byteorder with interval concatenations doc: statements: fwd supports for sending packets via neighbouring layer scanner: munch full comment lines tests: py: missing json for different byteorder selector with interval concatenation netlink: swap byteorder of value component in concatenation of intervals evaluate: do not crash on runaway number of concatenation components netlink: statify __netlink_gen_data() netlink: add function to generate set element key data netlink: unfold function to generate concatenations for keys and data scanner: match full comment line in case of tie evaluate: fix compilation warning owner: Fix potential array out of bounds access build: Bump version to 1.0.6 Peter Collinson (1): py: extend python API to support libnftables API Phil Sutter (9): doc: nft.8: Add missing '-T' in synopsis erec: Dump locations' expressions only if set monitor: Sanitize startup race condition Warn for tables with compat expressions in rules Makefile: Create LZMA-compressed dist-files xt: Delay libxtables access until translation xt: Purify enum nft_xt_type xt: Rewrite unsupported compat expression dumping xt: Fall back to generic printing from translation Xiao Liang (1): src: Don't parse string as verdict in map