Merge upstream v3.3.0

This merges upstream's iproute2 version 3.3.0. Note that change
I32df4075 for bionic is needed for the unshare() syscall.

The merge incorporates the following commits:

commit 4bb00cd2b7525ad7d6cf6bbea945ad6e546873f4
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Mar 19 17:27:12 2012 -0700

    v3.3.0

commit 82499282b27c82a25448dc40948920950c9a6936
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Mar 19 17:24:43 2012 -0700

    ip: allow set and display of link mode parameter

    The kernel supports a link mode attribute (which can be dormant or default).
    This attribute is used to control how the link watch engine
    handles operstate transistion.

    This adds a new parameter to ip link command to allow setting and
    displaying the value.
    ---

commit 718165534d0c57ea23c536f57affe7f04a33199a
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Mar 19 17:18:49 2012 -0700

    gre: allow 0 as a legal key value

    There is nothing in the standard that says 0 can't be used as a key.
    It makes sense to allow it. Also fix typo where ikey was printed for
    when printing okey.

commit 7dd03712226d2943e46f427217158707c148d2b3
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Mar 15 17:47:51 2012 -0700

    Fix rta_getattr_u32 wrapper and add getattr_u8

commit 598a42c09153a1b6cfe03efa3f7e68773eec912d
Author: Florian Westphal <fw@strlen.de>
Date:   Tue Mar 13 12:35:25 2012 +0000

    ip: xfrm: report nat-t/encapsulation portmapping updates

    Signed-off-by: Florian Westphal <fw@strlen.de>

commit c23abafbdcdd3754bea50f1452fed36da5515379
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Mar 15 14:44:13 2012 -0700

    update to 3.3-rc7 kernel headers

commit 43d29f782f12d6212ea3717a3a47b0036474a67c
Author: Kenyon Ralph <kenyon@kenyonralph.com>
Date:   Thu Mar 15 14:39:12 2012 -0700

    Update ip address manual page

    * update synopsis to match "ip address help" output
    * specify IPv4, since "IP" is ambiguous
    * remove deprecated site scope
    * document lifetimes, home, and nodad
    * update wording to make sense since page was split from the ip(8) page
    * git rid of extra spaces

commit 90d98edf39dc7da64fdf79408d5378e8d88acbe3
Author: Anton Danilov <littlesmilingcloud@gmail.com>
Date:   Thu Mar 15 14:24:59 2012 -0700

    csum action, fix typo

commit b8d59e1ec1c4b9bfbe9caa14b3aa8f976f7cd045
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Mar 14 10:38:53 2012 -0700

    Fix ip-monitor manual page what-is entry

    Debian warning that NAME wasn't parsible

commit 09fa32794154a69d4a6fbc58c1ee02dbe26a99e9
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Mar 14 10:24:25 2012 -0700

    iproute: allow changing gretap parameters

    Change the order of evaluation of ip link type arguements to allow
    changing parameters of gre tunnels.

    The following wouldn't work:
     # ip li add mytunnel type gretap remote 1.1.1.1 key 3
     # ip li set mytunnel type gretap key 9

commit a6ddc2061730af713d69b78968a84c1be929f4c4
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Mar 14 10:22:25 2012 -0700

    Keep cscope around after make clean

    Follow convention of kernel and keep cscope file around
    after make clean.

commit f526af995e4b610334ddea250686643b2d6e9729
Author: Andreas Henriksson <andreas@fatal.se>
Date:   Fri Mar 9 17:09:19 2012 +0100

    iproute: fix tc -iec display of Mibit rates

    As reported by Thomas Mühlgrabner <muehltom@cable.vol.at>
    in http://bugs.debian.org/662979 :

     When showing htb class configuration with "tc -iec class show",
     the output for Mibit is actually the value for bit.
     Example: configure a class with a ceil of 1000Mibit.
     Output states 1048576000 Mibit.

    The cause is missing parenteses in the display code of tc....

    (Please also note that a lower value of 100Mibit will be displayed
    as 102400 Kibit, which I think is kind of ugly.)

    Reported-by: Thomas Mühlgrabner <muehltom@cable.vol.at>
    Signed-off-by: Andreas Henriksson <andreas@fatal.se>

commit 8ced4fcd50dbbf7a0219ff5705390e6f89ba434c
Author: Yegor Yefremov <yegorslists@googlemail.com>
Date:   Mon Feb 27 15:21:15 2012 +0100

    iproute2: cleanup dependencies

    LIBNETLINK will be defined in the main Makefile, so
    both ../lib/libnetlink.a ../lib/libutil.a will be
    automatically appended during linking. Otherwise
    ../lib/libnetlink.a ../lib/libutil.a will appear
    twice during linking.

    Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

commit e2a4536a4315ba1db6afccd4ccc41499bbde4c14
Author: Petr Sabata <contyk@redhat.com>
Date:   Wed Feb 15 06:02:33 2012 +0000

    iproute2: tc - mqprio formatted print fix

    Just a minor correction of mqprio printf()'s.

    Reported-by: Petr Písař <ppisar@redhat.com>
    Signed-off-by: Petr Šabata <contyk@redhat.com>

commit e6e6fb5c6a4f12112d41c6f4a3de1002f7fc3d4f
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Tue Feb 21 17:18:59 2012 -0800

    ipaddress: cleanup code for link stats64

    On 64 bit platform, casting to unsigned long long is unnecessary.
    Use inttypes.h and stdtypes.h to resolve it.

commit 0df7db3cf431d88953cda6220e76ece39bd0c344
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Fri Feb 17 08:17:09 2012 -0800

    arpd: allow configuring polling interval

    A new option -p is added to the arpd command that accepts
    a time indicating the number of seconds
    to wait between kernel arp table polling attempts.
    The minimum value is .1 (100ms).

    If not specified, polling defaults to 30 seconds.

    Patch by Erik Hugne <erik.hugne@ericsson.com> with
    modifications

commit 2728f598bbeb6d4b7cc7f65a774ab70fdca04ab4
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Feb 16 16:42:42 2012 -0800

    ss: simplify code

    Rather than copy-pasting code using sendmsg/recvmsg, use the simpler
    send() and recv() system calls.

commit c51577cd133a4b569349983f2e49933d0a124a0b
Author: Matt Tierney <tierney@cs.nyu.edu>
Date:   Wed Feb 15 18:20:38 2012 -0500

    ss: Close file descriptors in tcp_show_netlink.

    ss: Close file descriptors in tcp_show_netlink.

    Signed-off-by: Matt Tierney <tierney@cs.nyu.edu>

commit 20ed7b24df05eadf83168d1d0ce0052a31380928
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Feb 15 10:05:45 2012 -0800

    dhcp-client-script: don't use /tmp

    /tmp is a dangerous place and better to put log files in /var/log.
    Based on patch by Vasiliy Kulikov <segoon@openwall.com>

commit e557d1ac3a156ba7521ba44b0b412af4542f83f8
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Feb 15 10:03:39 2012 -0800

    Don't put configure files in /tmp

    Based on patch by Vasiliy Kulikov <segoon@openwall.com>
    Don't use /tmp since it is dangerous, instead put temporary files
    from configure script in build directory. This is what autoconf
    generated configure does.

commit cdae8bcc0fb4210a632acddac4401cad3b09c707
Author: Tony Zelenoff <antonz@parallels.com>
Date:   Thu Jan 26 04:50:05 2012 +0000

    Adjust man page for new functionality

    Signed-off-by: Tony Zelenoff <antonz@parallels.com>

commit 1dac7817b44f0dea2828c2b897c7b3c81550e057
Author: Tony Zelenoff <antonz@parallels.com>
Date:   Thu Jan 26 04:50:04 2012 +0000

    Modify neighbour proxy show

    New "ip neigh show proxy" command now can show proxies which
    were added with "ip neigh add proxy" command. Kernel code to
    support this feature sent a bit earlier to netdev.

    Signed-off-by: Tony Zelenoff <antonz@parallels.com>

commit 0e56c6b69b8d1a073b5741798e662cca19adaa70
Author: Greg Rose <gregory.v.rose@intel.com>
Date:   Thu Feb 9 13:21:16 2012 -0800

    iproute2: Add VF spoofchk command description to ip-link.8 man page

    Add documentation for the ip link set spoof checking option.  The
    expanded text section explaining the VF commands was missing this
    text.

    Signed-off-by: Greg Rose <gregory.v.rose@intel.com>
    Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>

commit d798a0483ed6b3c7dcf84595b38a75e04ac0ee54
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Feb 6 09:45:50 2012 -0800

    red: add missing include math.h

    red now uses pow() function.

commit cfd2cbd15f03e26fdb8617a9f37a0a25425adfe2
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Feb 6 09:35:27 2012 -0800

    Add cast to rta_getattr_str

    Warning from C++

commit a3fd8e58c1787af186f5c4b234ff974544f840b6
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Mon Jan 30 17:05:45 2012 +0100

    ss: should support CONFIG_INET_UDP_DIAG=n kernels

    ss -x currently fails if CONFIG_INET_UDP_DIAG=n or old kernels

    Also close file descriptors while we are at it.

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
    Cc: Pavel Emelyanov <xemul@parallels.com>

commit 50c6f3ee5bc6b6aa3c9f4a0efc79c2621ce3650a
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Tue Jan 24 14:29:38 2012 +0100

    tc-sfq: update man page

    Add documentation about RED mode, and new parameters (flows, depth)
    added in linux 3.3

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit e61df2105cb0cb936bb4298b6139544ca1bfa62a
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Tue Jan 24 14:18:33 2012 +0100

    tc-red: update man page

    include documentation for harddrop and adaptive parameters.

    All parameters but limit and avpkt are optional.

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit e330c1853d69576eaa584b9cb5ecaa79d674ad75
Author: Vijay Subramanian <subramanian.vijay@gmail.com>
Date:   Mon Jan 23 22:08:52 2012 -0800

    netem: Fix 'reorder' section of man page

    The syntax used in the example on reordering in the manpage is inconsistent with
    the usage syntax.  Moreover, the text does not describe the reordering process
    in the kernel correctly. This patch fixes these two issues.

    Signed-off-by: Vijay Subramanian <subramanian.vijay@gmail.com>

commit 0bdb83cd703fd96ba765122b1fd205318db606bc
Author: Vijay Subramanian <subramanian.vijay@gmail.com>
Date:   Mon Jan 23 22:08:51 2012 -0800

    netem: Fix up grammatical errors in man page

    Signed-off-by: Vijay Subramanian <subramanian.vijay@gmail.com>

commit f6062360100ada8cbaac5b837c85c8f2f3e0765d
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Fri Jan 20 12:48:00 2012 -0800

    Fix unix socket diagnostic build

    Get updated headers incorporated into build environment
    and include required sock_diag.h.

commit dfbaa90dec05d3798ad845db20e1b273ffcfcf0a
Author: Pavel Emelyanov <xemul@parallels.com>
Date:   Thu Dec 15 03:28:15 2011 +0000

    iproute: Dump unix sockets via netlink

    Get the same info as from /proc file plus the peer inode.

    Applies on top of new sock diag patch and udp diag patch.

    Signed-off-by: Pavel Emelyanov <xemul@parallels.com>

commit db4a7f198b6193a1e584c3b6647d92bb6c66fb52
Author: nick black <dankamongmen@gmail.com>
Date:   Fri Jan 20 12:32:44 2012 -0800

    Update ip manpage

    Fix synopsis and other references to match current code.

commit 14a1c164d12e32415acc44ef566fcf52ff4dd113
Author: Vijay Subramanian <subramanian.vijay@gmail.com>
Date:   Fri Jan 20 09:50:25 2012 -0800

    netem: Fail cleanly if user input is wrong

    (Resending patch since it looks like my earlier mail did not make it to
    netdev).

    netem reordering requires that the delay parameter be given. Currently, if no
    delay is given, tc prints the error message but still installs the qdisc. Fix
    this by printing the usage and failing cleanly.

    Signed-off-by: Vijay Subramanian <subramanian.vijay@gmail.com>

commit fdeae171e52845b465971566c9a14498dda34307
Merge: 1b6f0bb 5aa08f6
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Fri Jan 20 08:17:59 2012 -0800

    Merge branch 'master' of nehalam:src/iproute2

commit 5aa08f6bf4107f8aec43c0678466a314dbd0d054
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Fri Jan 20 08:16:02 2012 -0800

    ip: make 'ip l' be 'ip link'

    Restore compatiablity for those lazy typists.

commit 1b6f0bb5be5d71fd62ed6ccbc3665adc6e747b82
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Fri Jan 20 16:27:50 2012 +0100

    gred: support TCA_GRED_MAX_P attribute

    TCA_GRED_MAX_P permits to express high resolution probabilities.

    New output (on 3.3+ kernel) :

    disc gred 9442: root refcnt 17
     DP:0 (prio 1) Average Queue 0b Measured Queue 0b
    	 Packet drops: 0 (forced 0 early 0)
    	 Packet totals: 20 (bytes 2584)
     limit 31460b min 3000b max 9000b ewma 5 probability 0.05 Scell_log 15

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit 650252d8c36453dd08de3e67235d8f326ba451ec
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Fri Jan 20 16:19:44 2012 +0100

    choke: support TCA_CHOKE_MAX_P

    TCA_CHOKE_MAX_P permits to express high resolution RED probability.

    tc qdisc add dev $DEV parent 1:1 handle 10: est 1sec 8sec choke \
    	limit 90 ecn min 10 max 30 probability 0.05 bandwidth 10Mbit

    Before patch :

    tc -s -d qdisc show dev eth3
    qdisc ... limit 90p min 10p max 30p ecn ewma 3 Plog 19 Scell_log 13

    After :

    qdisc ... limit 90p min 10p max 30p ecn ewma 3 probability 0.05
    Scell_log 13

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit 6987ecf0832d62350ea10432f3f1f7a84c457b81
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Fri Jan 20 12:17:43 2012 +0100

    sfq: add optional RED on top of SFQ

    Adds an optional Random Early Detection on each SFQ flow queue.

    Traditional SFQ limits count of packets, while RED permits to also
    control number of bytes per flow, and adds ECN capability as well.

    1) We dont handle the idle time management in this RED implementation,
    since each 'new flow' begins with a null qavg. We really want to address
    backlogged flows.

    2) if headdrop is selected, we try to ecn mark first packet instead of
    currently enqueued packet. This gives faster feedback for tcp flows
    compared to traditional RED [ marking the last packet in queue ]

    Example of use :

    tc qdisc add dev $DEV parent 1:1 handle 10: est 1sec 4sec sfq \
    	limit 3000 headdrop flows 512 divisor 16384 \
    	redflowlimit 100000 min 8000 max 60000 probability 0.20 ecn

    qdisc sfq 10: parent 1:1 limit 3000p quantum 1514b depth 127 headdrop
    flows 512/16384 divisor 16384
     ewma 6 min 8000b max 60000b probability 0.2 ecn
     prob_mark 0 prob_mark_head 4876 prob_drop 6131
     forced_mark 0 forced_mark_head 0 forced_drop 0
     Sent 1175211782 bytes 777537 pkt (dropped 6131, overlimits 11007
    requeues 0)
     rate 99483Kbit 8219pps backlog 689392b 456p requeues 0

    In this test, with 64 netperf TCP_STREAM sessions, 50% using ECN enabled
    flows, we can see number of packets CE marked is smaller than number of
    drops (for non ECN flows)

    If same test is run, without RED, we can check backlog is much bigger.

    qdisc sfq 10: parent 1:1 limit 3000p quantum 1514b depth 127 headdrop
    flows 512/16384 divisor 16384
     Sent 1148683617 bytes 795006 pkt (dropped 0, overlimits 0 requeues 0)
     rate 98429Kbit 8521pps backlog 1221290b 841p requeues 0

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit 54a2fce832b6993c83ce0d6b6c9ee08317c1d90c
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Fri Jan 20 16:10:13 2012 +0100

    red: fix adaptive spelling

    Reported-by: Jesse Brandeburg <jesse.brandeburg@intel.com>
    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit e7e4abea3e9f37ac18ce3f104ac8e61b5f144459
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Thu Jan 19 14:45:20 2012 -0800

    red: Add adaptative algo Logged in as shemminger

    Enable Adaptative RED algo, using :

    tc qdisc  ... red limit BYTES ... adaptative ...

    Support of high precision probability/max_p setting and reporting, with
    support of old kernels.

    With a new kernel, "Plog ..." is replaced in tc output by "probability
    value" :

    qdisc red 10: dev eth3 parent 1:1 limit 360Kb min 30Kb max 90Kb ecn ewma
    5 probability 0.09 Scell_log 15

commit 59858866e3c369574ddebfcd27f064980e8ea775
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Jan 19 14:38:36 2012 -0800

    netem: add rate extension to man page

    Fixed up version of patch from Hagen Paul Pfeifer <hagen@jauu.net>
    Also run spell check.

commit 6b8dc4deea219d6c4392707bb647cc49cdc46da7
Author: Hagen Paul Pfeifer <hagen@jauu.net>
Date:   Thu Jan 19 14:28:27 2012 -0800

    tc: netem rate shaping and cell extension

    This patch add rate shaping as well as cell support. The link-rate can be
    specified via rate options. Three optional arguments control the cell
    knobs: packet-overhead, cell-size, cell-overhead. To ratelimit eth0 root
    queue to 5kbit/s, with a 20 byte packet overhead, 100 byte cell size and
    a 5 byte per cell overhead:

    	tc qdisc add dev eth0 root netem rate 5kbit 20 100 5

    Signed-off-by: Hagen Paul Pfeifer <hagen@jauu.net>

commit 30d10db5667d3ca86917ca86c1a65cfcc45965f9
Author: Hagen Paul Pfeifer <hagen@jauu.net>
Date:   Tue Dec 20 11:28:46 2011 +0000

    utils: add s32 parser

    Signed-off-by: Hagen Paul Pfeifer <hagen@jauu.net>

commit aa38c3eefaf6c6f4fd0a8858f6b771b6c8f84129
Author: Masatake YAMATO <yamato@redhat.com>
Date:   Thu Jan 19 14:16:12 2012 -0800

    using NLM_F_DUMP flag constant in libnetlink.c

    This is trivial patch for libnetlink.c in iproute2.

    In iproute2/include/linux/netlink.h NLM_F_DUMP is defines as:

       #define NLM_F_DUMP	(NLM_F_ROOT|NLM_F_MATCH)

    It is not used in libnetlink.c. If used, the code becomes a bit easier
    to read.

    Signed-off-by: Masatake YAMATO <yamato@redhat.com>

commit 1c4cbdbc6a33a9b4d6e0e95749d64cd718f3c21e
Author: Vijay Subramanian <subramanian.vijay@gmail.com>
Date:   Thu Jan 19 13:17:03 2012 -0800

    netem: Add missing '}' in man page

    Signed-off-by: Vijay Subramanian <subramanian.vijay@gmail.com>

commit 7878c0ba404c3688442d2362203d79fa108450e0
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Jan 19 14:09:42 2012 -0800

    Update to 3.3 headers (with inet_diag fix)

    Incorporate change to fix inet_diag build failure.

commit a08d2590a042f8173713cb3b1bf7bb7aeb3ce584
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Tue Jan 10 10:50:02 2012 -0800

    Update to kernel v3.3 headers

    Initial merge window version of headers

commit aab2702d33b19326e24a61264f7fcb28d88c9b45
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Tue Jan 10 10:47:28 2012 -0800

    Fix man page whatis entry errors

    lintian says:
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man7/tc-hfsc.7.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-address.8.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-addrlabel.8.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-link.8.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-maddress.8.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-monitor.8.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-mroute.8.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-neighbour.8.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-netns.8.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-ntable.8.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-route.8.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-rule.8.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-tunnel.8.gz
    W: iproute: manpage-has-bad-whatis-entry usr/share/man/man8/ip-xfrm.8.gz

commit 13603f6a9e46f08576f6284a0ef1ce1fbf94ffe0
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Tue Jan 10 08:50:49 2012 -0800

    iplt2p: remove unused libnl headers

    Leftover from change to original code.

commit 447c118f138171b260ad045ad6e1b17f9ef462e2
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Jan 5 08:34:31 2012 -0800

    v3.2.0

commit 8e91a80d975d4086178158214d35af793695b614
Author: Jan Engelhardt <jengelh@medozas.de>
Date:   Wed Jun 1 00:52:07 2011 +0200

    iproute2: fix calling up the xt action

    Upsteam: has not been sent yet

    Requesting the xt action never succeeded because it registered
    using the wrong name.

commit d7aa57d450b2b651e9115d5d9ad6bf0f433798da
Author: Jan Engelhardt <jengelh@medozas.de>
Date:   Sat Sep 24 23:37:34 2011 +0200

    iproute2: proper detection of libxtables position and flags

    Upstream: not sent yet

    Any tests involving iptables _MUST_ utilize pkg-config to find the
    proper locations of the installation.

commit 6c513a006174e551552022405d677a897db78652
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Tue Jan 3 15:04:55 2012 -0800

    README cleanup's

    Spell check the README files and remove out of date release notes.

commit 155ad8023b2be449752e396306fb67785fb1ba8d
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Tue Jan 3 13:55:59 2012 -0800

    ematch: fix warning about unused input()

    Use existing compile flag to indicate that input() is not used
    by tc ematch, fixes compiler warning.

commit 5761f04fb8f47db22464ad420dd1a99ed842d569
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Tue Jan 3 13:55:00 2012 -0800

    ematch: fix warning about yyerror and const

    yyerror() should take const char * on current bison.

commit f5b830dc5dab07149157eb007de9a858a57e880b
Author: Jan Engelhardt <jengelh@medozas.de>
Date:   Sat Dec 31 23:16:27 2011 +0100

    iproute2: avoid use of implicit declarations

    gcc -DLIBDIR=\"/usr/lib64\" -D_GNU_SOURCE -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -Wstrict-prototypes -fPIC -DXT_LIB_DIR=\"/usr/lib64/xtables\" -I../include -DRESOLVE_HOSTNAMES -DLIBDIR=\"/usr/lib64\" -fPIC   -c -o ipx_pton.o ipx_pton.c
    In file included from ../include/utils.h:8:0,
                     from ipx_ntop.c:5:
    ../include/libnetlink.h: In function 'rta_getattr_u64':
    ../include/libnetlink.h:84:2: warning: implicit declaration of function 'memcpy'
    ../include/libnetlink.h:84:2: warning: incompatible implicit declaration of built-in function 'memcpy'

commit 38cd311adef818a891a0d9fa778969419fe55141
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Fri Dec 23 20:52:10 2011 -0800

    l2tp: Add l2tp support

    Based on earlier implementation by James Chapman. But instead of
    dragging in all of libnl, use existing libnetlink infrastructure.

commit 46c5d64d6967da4401122159a8d9488c1878be65
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Dec 29 09:29:33 2011 -0800

    libnetlink: add attribute access inline functions

    Based on idea in libmnl, add attribute access functions instead
    of explicitly exposing casts. Also handle possible alignment issues
    of u64.

commit cd70f3f522e04b4d2fa80ae10292379bf223a53b
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Dec 28 10:37:12 2011 -0800

    libnetlink: remove unused junk callback

    Both rtnl_talk and rtnl_dump had a callback for handling portions
    of netlink message that do not match the correct pid or seq.
    But this callback was never used by any part of iproute2 so remove
    it.

commit d060de7f8da283fcd410b16f687cd6b33382c316
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Sat Dec 24 05:39:13 2011 +0100

    netem: fix a typo in explain()

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit 2aa3dd29a75c494bf969586da5489d4dc7d07839
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Fri Dec 23 10:43:54 2011 -0800

    libnetlink: add more attribute functions

    New functions to handle u8, u16, u32, u64 and string attribute types.
    Use common code for all attribute wrappers.

commit 6cf8398f5f487762586801c25539d8fe5bb33b39
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Fri Dec 23 10:40:04 2011 -0800

    libnetlink: change rtnl_send() to take void *

    Avoid having to cast buffer being sent.

commit 3c7950af598beab378a291ee0540da438978a4b2
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Dec 22 17:08:11 2011 -0800

    netem: add support for 4 state and GE loss model

    Incorporate support for new loss models.

commit fd6fac34e908fb3bd2cc83ee3870ec5a9601b0dc
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Dec 22 16:50:54 2011 -0800

    netem: fix man page

    Format man page with conventional style (BNF and italics) to make
    it match other pages.

    Fix loss model options to match what will implemented!

commit 1b1177ed5f3a8e34b1c7c7c79922c31448f212c9
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Dec 22 10:40:39 2011 -0800

    Update to latest 3.2 kernel headers

    Keep in sync

commit 2a9721f1c4efc2b0a0b814a705b393b1533e60d8
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Dec 22 10:34:03 2011 -0800

    Split up ip man page

    The man page for ip command had grown too large to be readable.
    Break it up into separate pages.

commit 2587c01a0e7153909986694a4c547e108643c0a3
Author: Florian Westphal <fw@strlen.de>
Date:   Sun Dec 11 12:31:58 2011 +0000

    tc: man: add man page for stochastic fair blue

    With help from Eric Dumazet.
    Man page is derived in parts from README file contained in
    Juliusz Chroboczeks original sfb kernel patch.

commit 841fc7bc983d2f8d8de589c151d2f8bdf8d73b18
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Fri Dec 9 00:11:40 2011 +0100

    red: harddrop support and cleanups

    Add harddrop support (kernel support added a long time ago), and various
    cleanups.

    min BYTES, max BYTES are now optional and follow Sally Floyd's
    recommendations.

    By the way, our default 2% probability is a bit low, Sally recommends 10%.
    Not a big deal if upcoming adaptative algo is deployed.

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit cd72dcf13c8a4948ee5706794714287eeff62c90
Author: Hagen Paul Pfeifer <hagen@jauu.net>
Date:   Fri Nov 25 03:47:56 2011 +0000

    netem: add man-page

    Signed-off-by: Hagen Paul Pfeifer <hagen@jauu.net>

commit ab15aeacf5a106cfb8e72cd6760e8cf134161ceb
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Thu Dec 1 15:25:59 2011 +0100

    red: make burst optional

    Documentation advises to set burst to (min+min+max)/(3*avpkt)

    Let tc do this automatically if user doesnt provide burst himself.

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit 0cf67ead7bdc95700958b9cfd341b75b4432bb88
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Thu Dec 1 12:04:31 2011 +0100

    red: give a hint about burst value

    Check for burst values that are too small.

    Reported-by: Dave Taht <dave.taht@gmail.com>
    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit 7b8179c780a1abd547e5002c4e6fba898c6d72bb
Author: Greg Rose <gregory.v.rose@intel.com>
Date:   Thu Oct 13 20:31:32 2011 +0000

    iproute2: Add new command to ip link to enable/disable VF spoof check

    Add ip link command parsing for VF spoof checking enable/disable

    V2 - Fixed problem with parsing of dump info on kernels that don't
         support the spoof checking option and also wrapped the ifla_vf_info
         structure in #ifdef __KERNEL__ to prevent user space from directly
         accessing the structure
    V3 - Improved parsing of vfinfo
    V4 - Put Makefile back to proper list of subdirs
    V5 - Remove struct ifla_vf_info, it is only used by the kernel
    V6 - Make sure spoof check is reported by the driver - rtnl will set
         it to -1 to indicate driver didn't report a value.

    Signed-off-by: Greg Rose <gregory.v.rose@intel.com>
    Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>

commit 719b958bbdfd1cb85d4b59826c503d0982322a9d
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Wed Nov 16 07:59:06 2011 +0000

    ss: report ecnseen

    Support ECNSEEN reporting in ss command.

    ESTAB      0      0           10.170.73.123:4900
    10.170.73.125:51001    uid:501 ino:385994 sk:f31e5f00
             mem:(r0,w0,f0,t0) ts sack ecn ecnseen bic wscale:8,8 rto:210
    rtt:18.75/15 ato:40 cwnd:10 send 69.9Mbps rcv_space:32768

    "ecn" means TCP session negociated ECN capability (TCP layer) at setup
    time

    "ecnseen" at least one frame with ECT(0) or ECT(1) or ECN (IP layer) was
    received from peer.

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit fcbd0165fcf6d0efdfb02220ac77342ce0c0e224
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Wed Nov 23 22:15:19 2011 +0100

    tc: Use correct variable type for get_distribution() result

    get_distribution() returns an int.

    cppcheck reported:
    [tc/q_netem.c:243]: (style) Checking if unsigned variable 'dist_size' is less than zero.

    The mismatch actually rendered the error checking
    after get_distribution() ineffective.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit a3da01c519ed13714ad80be3a771e81ae10ea835
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Wed Nov 23 22:13:23 2011 +0100

    tc: Remove unused variable 'res'.

    Detected by cppcheck.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit 9044a4547d73df5c41fd53c83e5ccc2a59200797
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Nov 23 14:34:49 2011 -0800

    Update to 3.2.0-rc2 headers

commit 9cbe6bc337a35b91882f92599eefeb161f3e776e
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Nov 17 16:53:50 2011 -0800

    v3.1.0

commit 16963ce6f01f94d1f5486008c4d73f5612beb1a6
Author: Petr Šabata <contyk@redhat.com>
Date:   Wed Nov 16 09:32:20 2011 -0800

    Display closed UDP sockets on 'ss -ul'

    This patch emulates 'netstat -ul' behavior, showing 'closed'
    (state 07) UDP sockets when ss is called with '-ul' options.
    Although dirty, this seems like the least invasive way to fix
    it and shouldn't really break anything.

    Signed-off-by: Petr Šabata <contyk@redhat.com>

commit 93ba481acbbdfbbc5de2bf181c9cfe5549d66cdd
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Nov 2 16:39:36 2011 -0700

    cleanup ematch yacc files

    make clean needs to remove all the yacc output files for ematch.

commit 9bac173fa6d5d96fac795bab95957938da8fdd2d
Author: Michal Soltys <soltys@ziu.info>
Date:   Mon Oct 31 22:56:38 2011 +0100

    HFS manpage changes

    Few minor changes and small additions.

commit 41f6004139e3dd8c8ab0d62ad0142f92b22e8c4a
Author: Michal Soltys <soltys@ziu.info>
Date:   Wed Oct 26 04:15:21 2011 -0400

    HFSC (7) & (8) documentation + assorted changes

    This patch adds detailed documentation for HFSC scheduler. It roughly
    follows HFSC paper, but tries to not rely too much on math side of things.
    Post-paper/Linux specific subjects (timer resolution, ul service curve, etc.)
    are also discussed.

    I've read it many times over, but it's a lengthy chunk of text - so try
    to be understanding in case I made some mistakes.

    tc-hfsc(7): explains algorithm in detail (very long)
    tc-hfsc(8): explains command line options briefly
    tc(8): adds references to new man pages
    Makefile: adds man7 directory to install target
    q_hfsc.c: minimal help text changes, consistency with tc-hfsc(8)

    Signed-off-by: Mike Frysinger <vapier@gentoo.org>

commit aa48b5931a069b8f8faf41c2efc769f3127b28d6
Author: Mike Frysinger <vapier@gentoo.org>
Date:   Tue Oct 18 17:38:08 2011 -0400

    tc: fix parallel build file with lex/yacc

    Building iproute2 in parallel might hit the race failure:
    	emp_ematch.l:2:30: fatal error: emp_ematch.yacc.h:
    		No such file or directory
    	make[1]: *** [emp_ematch.lex.o] Error 1

    This is because we currently allow the yacc/lex files to generate and
    compile in parallel.  So add a simple dependency to make sure yacc has
    finished before we attempt to compile the lex output.

    Signed-off-by: Mike Frysinger <vapier@gentoo.org>

commit 7397944de6c11519a5951fc1bcff20225e71c4bd
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Oct 13 08:38:33 2011 -0700

    ip: fix exit codes

    Alternative fix to problem reported by: Bin Li
    The issue is came from https://bugzilla.novell.com/show_bug.cgi?id=681952.

    In any previous version (since suse ... 10.0?), ip addr add always returned
    the error code 2 in case the ip address is already set on the interface:

        inet 172.16.2.3/24 brd 172.16.2.255 scope global bond0
    RTNETLINK answers: File exists
    2

    On 11.4, it returns the exit code 254:

        inet 172.16.1.1/24 brd 172.16.1.255 scope global eth0
    RTNETLINK answers: File exists
    254

    This of course causes ifup to return an error in this quite common case..

commit 788731b320f87db9dc99638d2e3cf94bca245c6d
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Thu Oct 13 10:30:21 2011 +0200

    Fix unterminated readlink() buffer usage

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit 707f612c00a91fe3c17d7af5319e423545a496c5
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Oct 10 11:02:42 2011 -0700

    Update to 3.1-rc9 kernel headers

    Align header files with sanitized version of headers in kernel.

commit ce691fb5ce78b2c75243c60a757a3990ae09681c
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Oct 10 08:59:54 2011 -0700

    v3.0.0

commit b702f9cc3713dec6f79d75956b185679bb810f19
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Oct 10 08:55:56 2011 -0700

    ip: fix man page warnings

    Fix usage of ".R" which is not man macro.

commit 19bcc05beade576878abc04c53f17d4a5a620610
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Mon Oct 3 05:24:44 2011 +0000

    Fix file descriptor leak on error in read_igmp()

    Detected by cppcheck.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit 297452a1c24f1fbbdc41e220422aa1fb7b4dccf0
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Mon Oct 3 05:24:32 2011 +0000

    Fix file descriptor leak in do_tunnels_list()

    Detected by cppcheck.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit e588a7db167df75e659f99bd3b024eedafed62cc
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Mon Oct 3 05:24:18 2011 +0000

    Fix file descriptor leak on error in read_mroute_list()

    Detected by cppcheck.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit 67ef60a29333784d09245762e8270727cc758945
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Mon Oct 3 05:24:08 2011 +0000

    Fix file descriptor leak on error in read_viftable()

    Detected by cppcheck.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit 25352af7c2ee7291ac54a00a77b7e1de20676fe6
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Mon Oct 3 05:23:53 2011 +0000

    Fix file descriptor leak on error in iproute_flush_cache()

    Detected by cppcheck.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit e9a927dc08c8e8e70f68f84983c488158afb4a95
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Mon Oct 3 05:23:42 2011 +0000

    Add missing closedir() call in do_show()

    Detected by cppcheck.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit 1a6543c56bead259a44d5d1f288392503eaec292
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Mon Oct 3 05:23:30 2011 +0000

    Fix memory leak of lname variable in get_target_name()

    Detected by cppcheck.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit 9f1ba57016da5e65b83092f5ab05565091e0879d
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Mon Oct 3 05:23:18 2011 +0000

    Fix wrong sanity check in choke_parse_opt()

    Detected by cppcheck.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit 6d5ee98a7c47644308ccb167faa93e07bb702fd8
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Mon Oct 3 05:22:56 2011 +0000

    Fix wrong comparison in cmp_print_eopt()

    Detected by cppcheck.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit 97c13582f98377c9e1a72ed40fb2b80225c4c0f9
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Mon Oct 3 05:22:42 2011 +0000

    Fix file descriptor leak on error in rtnl_hash_initialize()

    Detected by cppcheck.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit 21a5a6b37892d7173f38691d1f84366840ce3917
Author: Jiri Benc <jbenc@redhat.com>
Date:   Mon Sep 19 05:14:10 2011 +0000

    iproute2: fix changing of ip6ip6 tunnel parameters

    When changing ip6ip6 parameters (ip -6 tun change), ip passes zeroed
    struct ip6_tnl_parm to the kernel. The kernel then tries to change all of
    the tunnel parameters to the passed values, including zeroing of local and
    remote address. This fails (-EEXIST in net/ipv6/ip6_tunnel.c:ip6_tnl_ioctl).

    For other tunnel types, ip fetches the current parameters first and applies
    the required changes on top of them. This patch applies the same code as in
    ip/iptunnel.c to ip/ip6tunnel.c.

    See http://bugzilla.redhat.com/730627 for the original bug report.

    Signed-off-by: Jiri Benc <jbenc@redhat.com>

commit 2bcc3c16293fc049e29989a2ddeffe71a1cf3910
Author: Thomas Jarosch <thomas.jarosch@intra2net.com>
Date:   Mon Oct 3 05:22:27 2011 +0000

    Fix pipe I/O stream descriptor leak in init_service_resolver()

    Detected by cppcheck.

    Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>

commit a22e92951d21d0f796040d0d6c00d59a1e188bca
Author: Sridhar Samudrala <sri@us.ibm.com>
Date:   Thu Oct 6 16:10:51 2011 -0700

    iproute2: Fix usage and man page for 'ip link'

    Add bridge as a supported type with 'ip link' in usage and all the missing
    types in 'ip' man page. Also fixed some typos.

    Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>

commit 281d740691cde36eb8b23f8a97c90f8684638f45
Author: Petr Sabata <contyk@redhat.com>
Date:   Thu Oct 6 14:45:34 2011 +0200

    iproute2: arpd - fix usage and manpage options

    Signed-off-by: Petr Sabata <contyk@redhat.com>

commit 7e8bd80e38011a228d9843d312f7a9bb0f811b00
Author: Petr Sabata <contyk@redhat.com>
Date:   Thu Oct 6 14:45:33 2011 +0200

    iproute2: lnstat - fix typos

    Signed-off-by: Petr Sabata <contyk@redhat.com>

commit 583de1498e05e5a826b217cc645f92ce0bd015e8
Author: Petr Sabata <contyk@redhat.com>
Date:   Thu Oct 6 14:45:32 2011 +0200

    iproute2: ss - fix missing parameters

    Signed-off-by: Petr Sabata <contyk@redhat.com>

commit 8555902504bcae8609cb79118f4c485c79f16856
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Aug 31 13:23:04 2011 -0700

    Add ntable to ip man page

    Add some documentation about ip neighbour table parameter command.

commit 4f3626f9206b8a23637a3c36ec28db1e895850d4
Author: Dan McGee <dan@archlinux.org>
Date:   Wed Aug 31 12:18:49 2011 -0700

    xt: only unset fields if m is non NULL

commit 9a230771c0a0b27e2f26bbbc29a93ad1ad591ce9
Author: Dan McGee <dan@archlinux.org>
Date:   Wed Aug 31 12:16:36 2011 -0700

    ensure uptime is initialized if /proc/uptime cannot be opened

commit 1b129bf2fe280f9aa7a22cbcd00dd3114dd5d65c
Author: Dan McGee <dan@archlinux.org>
Date:   Wed Aug 31 12:15:22 2011 -0700

    genl: remove unused code

    remove unused basename logic, avoid dereference of possibly NULL variable

commit 1313ceb4d668d7ea343acb0c573aeae17669ff54
Author: Dan McGee <dan@archlinux.org>
Date:   Wed Aug 31 12:14:51 2011 -0700

    iptuntap: avoid double open

    would leak a file handle

commit 223f4d8ea6803bd9288d54c819e54a88a63c1730
Author: Eric W. Biederman <ebiederm@xmission.com>
Date:   Fri Jul 15 14:29:41 2011 +0000

    iproute2: Fail "ip netns add" on existing network namespaces.

    Use O_EXCL so that we only create and mount a new network namespace
    if there is no chance an existing network namespace is present.

    Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>

commit 2e8a07f543e6f48f0d0479e3dd4796c18f733e12
Author: Eric W. Biederman <ebiederm@xmission.com>
Date:   Fri Jul 15 14:26:59 2011 +0000

    iproute2: Auto-detect the presence of setns in libc

    If libc has setns present use that version instead of
    rolling the syscall wrapper by hand.

    Dan McGee found the following compile error:

        gcc -D_GNU_SOURCE -O2 -Wstrict-prototypes -Wall -I../include
        -DRESOLVE_HOSTNAMES -DLIBDIR=\"/usr/lib/\"   -c -o ipnetns.o ipnetns.c
        ipnetns.c:31:12: error: static declaration of ‘setns’ follows non-static
        declaration
        /usr/include/bits/sched.h:93:12: note: previous declaration of ‘setns’
        was here
        make[1]: *** [ipnetns.o] Error 1

    Reported-by:  Dan McGee <dan@archlinux.org>
    Tested-by:  Dan McGee <dan@archlinux.org>
    Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>

commit 0f28c38b34fbfe97a3f0e84871d6dde737b597a9
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Aug 31 11:00:26 2011 -0700

    Update headers to 3.0.4

    Update the automatically generated sanitized headers

commit 44e743e588bcc737b7a2a5891f90279c58934ad7
Author: Dan McGee <dan@archlinux.org>
Date:   Fri Jul 15 08:52:24 2011 +0000

    Make iproute2 configure script more flexible

    On Arch Linux, we still install the iptables shared libraries in
    /usr/lib/iptables/, even though the main library is installed to
    /usr/lib/libxtables.so. This change checks all available locations to
    correctly find the iptables library directory.

    Signed-off-by: Dan McGee <dan@archlinux.org>

commit 05fb9184f2129c50cd0e406e9eda80509307af25
Author: Florian Westphal <fw@strlen.de>
Date:   Wed Jul 27 06:47:05 2011 +0000

    tc: filter: fix default 'protocol all' on little-endian platforms

    when specifiying filters without 'protocol' keyword, tc will
    default to 'protocol all'.

    Unfortunately, this missed a byte-ordering conversion.

commit f9eab60d175a326e532b9b12534651db951c51b8
Author: Dan McGee <dan@archlinux.org>
Date:   Wed Aug 31 10:51:42 2011 -0700

    iproute2: Remove ChangeLog

    This hasn't been updated since 2006.

commit 75dbf137916a2356807edf12c84e4e906277dd3b
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Aug 31 10:45:04 2011 -0700

    Add LLDP to ethernet type table

    and make type table const.

commit 610b22a30fbb8eaa8092337676119d03419a27bb
Author: Florian Westphal <fw@strlen.de>
Date:   Mon Aug 1 11:23:37 2011 +0000

    tc: man: update sfq man page

    Document 'divisor' option and mention that external classifiers can be used.

commit b1978178facdfbce8d4dd6dec3a0e732fd258a75
Author: Florian Westphal <fw@strlen.de>
Date:   Sun Aug 28 10:35:43 2011 +0000

    tc: man: add man page for choke scheduler

commit ed0f006b869b69c4c05915a31da1ffaaf189c8c0
Author: Bin Li <libin.charles@gmail.com>
Date:   Wed Aug 31 10:42:00 2011 -0700

    ip: fix typo in ip link manual page

    Extra bracket

commit c0c44bfedda05e52572cc16c9d7777e1077d86cf
Author: Andreas Henriksson <andreas@fatal.se>
Date:   Wed Jul 20 17:08:14 2011 +0200

    iproute2: Remove "monitor" from "ip route help" output

    $ ip route help 2>&1 | grep monitor
    ip route { add | del | change | append | replace | monitor } ROUTE
    $ ip route monitor
    Command "monitor" is unknown, try "ip route help".

    (I guess what was really intended is "ip monitor route", so just remove
    the argument from the help output.)

    Originally reported by martin f krafft at http://bugs.debian.org/537681

    While at it, also drop all non-existant (route,link,netns) monitor
    arguments from the ip(8) man page.

    Signed-off-by: Andreas Henriksson <andreas@fatal.se>

commit c13f598242dd2b108016367ab318f15b0cf4db44
Author: Christoph Biedl <debian.axhn@manchmal.in-ulm.de>
Date:   Wed Jul 20 16:02:50 2011 -0700

    ip: fix display of prefix cache info

    The "ip monitor" command does properly decode the "preferred" and
    "valid" lifetime records in router advertisements from netlink
    messages.

commit c441bd4c1be614c022bc7a2b8804ad368d7bb484
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Fri Jan 7 09:43:27 2011 -0800

    Add QFQ scheduler

    Basic configuration support for QFQ.
    Still need to add manual page.

commit be181323c1724e6a5e3b296816d00d9151ae65ff
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Jul 13 09:49:17 2011 -0700

    Remove redundant limits.h

    redo.

commit 0dc34c7713bb7055378fe5cbc720d63d0db572a1
Author: Eric W. Biederman <ebiederm@xmission.com>
Date:   Wed Jul 13 09:48:26 2011 -0700

    iproute2: Add processless network namespace support

    The goal of this code change is to implement a mechanism such that it is
    simple to work with a kernel that is using multiple network namespaces
    at once.

    This comes in handy for interacting with vpns where there may be rfc1918
    address overlaps, and different policies default routes, name servers
    and the like.

    Configuration specific to a network namespace that would ordinarily be
    stored under /etc/ is stored under /etc/netns/<name>.  For example if
    the dns server configuration is different for your vpn you would create
    a file /etc/netns/myvpn/resolv.conf.

    File descriptors that can be used to manipulate a network namespace can
    be created by opening /var/run/netns/<NAME>.

    This adds the following commands to iproute.
    ip netns add NAME
    ip netns delete NAME
    ip netns monitor
    ip netns list
    ip netns exec NAME cmd ....
    ip link set DEV netns NAME

    ip netns exec exists to cater the vast majority of programs that only
    know how to operate in a single network namespace.  ip netns exec
    changes the default network namespace, creates a new mount namespace,
    remounts /sys and bind mounts netns specific configuration files to
    their standard locations.

    Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>

commit 21a85d3becf45e02985c466764ae19433d907c40
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Jul 11 10:38:10 2011 -0700

    Fix test for EOF on continuation line

    getline() returns -1 on EOF, need to not loose that by forcing
    result to size_t (unsigned).

    Reported-by: Petr Sabata

commit e760a19a437997820f16846636c0db23faa6d3ba
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Jul 11 10:31:07 2011 -0700

    Update kernel headers to 3.0

commit b5383aaac813099f88e13d0c7b5d32e05ac87e4e
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Jul 11 10:29:12 2011 -0700

    Update .gitignore

commit 73de5d96804160e3e399bd81b135053f70b27e7b
Author: Andreas Henriksson <andreas@fatal.se>
Date:   Mon Jul 4 05:17:42 2011 +0000

    iproute2: Fix building xt module against xtables version 6

    iptables/xtables apparently changed API again.... Now you need to pass
    and extra parameter (orig_opts) which was not needed before.

    Sprinkle some lovely pre-processor magic to be compatible with both older
    and new versions. In the beginning of times XTABLES_VERSION_CODE didn't
    exist. Then it was (0x10000 * major + 0x100 * minor + patch) when it was
    first introduced (according to git), but now it's at 6...
    Don't know what official iptables releases has defined it to over time.
    Lets just hope none of the older versions with is has the define
    higher then 6 is still around.... so only the "current" versioning
    scheme is supported.... lets see how long this lasts now.

    For the API change in xtables, see:
    http://git.netfilter.org/cgi-bin/gitweb.cgi?p=iptables.git;a=commitdiff;h=600f38db82548a683775fd89b6e136673e924097

    Signed-off-by: Andreas Henriksson <andreas@fatal.se>

commit 5582c0cffd5b65def21eca6ef0b7c165cb2f9523
Author: Petr Sabata <contyk@redhat.com>
Date:   Fri Jun 10 03:19:07 2011 +0000

    iproute2: Remove unreachable code

    This patch removes unreachable, useless code.

    Signed-off-by: Petr Sabata <contyk@redhat.com>

commit cbec0219132afd1749e1b8852b8b3729988af841
Author: David Ward <david.ward@ll.mit.edu>
Date:   Sat Jun 11 16:13:30 2011 +0000

    xfrm: Update documentation

    The ip(8) man page and the "ip xfrm [ XFRM-OBJECT ] help" command output
    are updated to include missing options, fix errors, and improve grammar.
    There are no functional changes made.

    The documentation for the ip command has many different meanings for the
    same formatting symbols (which really needs to be fixed). This patch makes
    consistent use of brackets [ ] to indicate optional parameters, pipes | to
    mean "OR", braces { } to group things together, and dashes - instead of
    underscores _ inside of parameter names. The parameters are listed in the
    order in which they are parsed in the source code.

    There are several parameters and options that are still not mentioned or
    need to be described more thoroughly in the "COMMAND SYNTAX" section of
    the ip(8) man page. I would appreciate help from the developers with this.

    Signed-off-by: David Ward <david.ward@ll.mit.edu>

commit 4f69c63a4b85745898c54f5aee624774f28ca0a2
Author: Gilles Espinasse <g.esp@free.fr>
Date:   Sun Jul 10 05:45:37 2011 +0000

    iproute2: fix minor typo in comments

    Signed-off-by: Gilles Espinasse <g.esp@free.fr>

commit 8acd148fab1256132bd00353629868a561a8581c
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Jun 29 16:01:48 2011 -0700

    v2.6.39

commit 49dff8c88c7a5d448bcce2ed2c42dd5d542b82c3
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Jun 29 15:59:41 2011 -0700

    xt match: fix set-never-used warning

commit 02ee3dbc783b926c7846de4b37ce5c577336b054
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Jun 29 15:59:02 2011 -0700

    skbedit: fix set-never-used warning

commit 18445b3e92ae9c7dd7effe191200d5a1a784388b
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Jun 29 15:58:37 2011 -0700

    ss: check result of readlink

    Don't ignore readlink failure.

commit dc484542a9d8d91db006af8a73d9ecddfef8f883
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Jun 29 15:58:12 2011 -0700

    Fix set-never-used warning in ifstat

commit 2dd9f8e073717aed2b624d1e9e325487260b57eb
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Jun 20 14:34:46 2011 -0700

    libnetlink: fix set never used warning

commit bf808cbf84bd96974b5a7d11484e8b0d46a467e8
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Jun 20 14:34:30 2011 -0700

    tc: fix set never used warning in red

commit d93b6b51e6a2bc6f2a3e7710d89cef659276c17d
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Jun 20 14:34:11 2011 -0700

    ip: iproute fix set never used warning

commit cdf3585224fe8042582c27825eb29763d7dedcf9
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Jun 20 14:33:55 2011 -0700

    ip: addrlabel fix set never used warning

commit df39de8d2485d24bf5e64201dae191e9ed6ccb0e
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Mon Jun 20 14:31:51 2011 -0700

    ss: fix autobound filter

    Fixes following error. We currently provide garbage data to kernel, that
    can abort the validation process or produce unexpected results.

    $ ss -a autobound
    State      Recv-Q Send-Q      Local Address:Port          Peer Address:Port
    TCPDIAG answers: Invalid argument

    After patch:

    $ misc/ss -a autobound
    State      Recv-Q Send-Q      Local Address:Port          Peer Address:Port
    LISTEN     0      128                     *:44624                    *:*
    ESTAB      0      0            192.168.1.21:47141        74.125.79.109:imaps

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit bcd7abddd4962f01f35eb644702c9abdf4c81d0e
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu May 19 09:19:17 2011 -0700

    tc filter: fix dport/sport in pretty print output

    Problem reported by Peter Lebbing on Debian.
    The decode of source and destination port filters in pretty print
    mode was backwards.

commit f78e316f25f8795e3e2b8d05ce2ecb908b62db9c
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Thu Oct 22 18:13:21 2009 +0000

    ip: Support IFLA_TXQLEN in ip link command

    Eric Dumazet a écrit :
    > We currently use an expensive ioctl() to get device txqueuelen, while
    > rtnetlink gave it to us for free. This patch speeds up ip link operation
    > when many devices are registered.
    >

    Here is a 2nd version od this patch, not displaying "qlen 0" useless info

    [PATCH iproute2] ip: Support IFLA_TXQLEN in ip link show command

    We currently use an expensive ioctl() to get device txqueuelen, while
    rtnetlink gave it to us for free. This patch speeds up ip link operation
    when many devices are registered.

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit 892eba309fab1bad2a15868163c0d10b6ed88592
Author: John Fastabend <john.r.fastabend@intel.com>
Date:   Tue Apr 26 12:44:42 2011 -0700

    iproute2: improve mqprio inputs for queue offsets and counts

    This changes mqprio input format to be more user friendly.

    Old usage,

     # ./tc/tc qdisc add dev eth3 root mqprio help
    Usage: ... mqprio [num_tc NUMBER] [map P0 P1...]
                      [offset txq0 txq1 ...] [count cnt0 cnt1 ...] [hw 1|0]

    New usage,

     # ./tc/tc qdisc add dev eth3 root mqprio help
    Usage: ... mqprio [num_tc NUMBER] [map P0 P1 ...]
                      [queues count1@offset1 count2@offset2 ...] [hw 1|0]

    Suggested-by: Ben Hutchings <bhutchings@solarflare.com>
    Signed-off-by: John Fastabend <john.r.fastabend@intel.com>

commit 4d91e4f168025d7051291bcc23f0f7a853ab74f8
Merge: 21cfb5e 242b8da
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Tue Apr 12 14:42:20 2011 -0700

    Merge branch 'for-2.6.39' of /home/shemminger/iproute2-net-next

    Conflicts:
    	include/linux/xfrm.h
    	ip/iplink.c

commit 242b8da71be73204500cc85613a399d6968f23af
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Tue Apr 12 14:40:14 2011 -0700

    Use INIT_NETDEV_GROUP

    Now that headers are sanitized, use the define.

commit c0635644cd0a4471c09f665f7098713f3157c170
Author: Ulrich Weber <uweber@astaro.com>
Date:   Thu Apr 7 09:37:05 2011 +0200

    iproute2: parse flag XFRM_POLICY_ICMP

    parse flag XFRM_POLICY_ICMP

    Signed-off-by: Ulrich Weber <uweber@astaro.com>

commit 7b032a1f773ed5f17e16c1feff8b0a124d5db98d
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Mar 23 12:29:17 2011 -0700

    Update README information

    Change url's and describe current kernel header values.

commit 914953046aac346b16143eee1c04b8a49bec8c8e
Author: John Fastabend <john.r.fastabend@intel.com>
Date:   Tue Apr 12 08:57:27 2011 -0700

    iproute2: tc add mqprio qdisc support

    Add mqprio qdisc support. Output matches the following,

    qdisc mq 0: dev eth1 root
    qdisc mq 0: dev eth2 root
    qdisc mqprio 8001: dev eth3 root  tc 8 map 0 1 2 3 4 5 6 7 1 1 1 1 1 1 1 1
                 queues:(0:7) (8:15) (16:23) (24:31) (32:39) (40:47) (48:55) (56:63)

    And usage is,

    Usage: ... mclass [num_tc NUMBER] [map P0 P1...]
                      [offset txq0 txq1 ...] [count cnt0 cnt1 ...] [hw 1|0]

    Signed-off-by: John Fastabend <john.r.fastabend@intel.com>

commit 27b3f524443ec617b125fcecb36ad1bc25268b72
Author: Brandon Philips <bphilips@suse.de>
Date:   Fri Mar 25 14:43:44 2011 -0700

    doc: add pdf targets

    Hello Stephen-

    Here is one more patch that SUSE has been carrying.

    Cheers, Brandon

commit d7f3299d591e31f84ea3b8d4549d4019da1f9a7b
Author: Juliusz Chroboczek <Juliusz.Chroboczek@pps.jussieu.fr>
Date:   Thu Mar 24 18:44:09 2011 +0100

    tc : SFB flow scheduler

    Supports SFB qdisc (included in linux-2.6.39)

    1) Setup phase : accept non default parameters

    2) dump information

    qdisc sfb 11: parent 1:11 limit 1 max 25 target 20
      increment 0.00050 decrement 0.00005 penalty rate 10 burst 20 (600000ms 60000ms)
     Sent 47991616 bytes 521648 pkt (dropped 549245, overlimits 549245 requeues 0)
     rate 7193Kbit 9774pps backlog 0b 0p requeues 0
      earlydrop 0 penaltydrop 0 bucketdrop 0 queuedrop 549245 childdrop 0 marked 0
      maxqlen 0 maxprob 0.00000 avgprob 0.00000

    Signed-off-by: Juliusz Chroboczek <Juliusz.Chroboczek@pps.jussieu.fr>
    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit 876cd7fa1001c538f6d2211745ac396d32659b2b
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Mar 23 12:34:21 2011 -0700

    Add README.devel

commit 59a935d2045b233539a2d0be00310d355a9e0ebd
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Wed Mar 23 12:29:06 2011 -0700

    Update email address of netem

commit 1f7190db3920f76cca7fdcd1bb318c6cfa4a3266
Author: Brandon Philips <bphilips@suse.de>
Date:   Wed Mar 23 12:03:49 2011 -0700

    ip: fix memory leak in ipmaddr.c

    If the continue is taken, then there is a memory leak.

    https://bugzilla.novell.com/show_bug.cgi?id=538996

    Reported-by: David Binderman <dcb314@hotmail.com>
    Signed-off-by: Brandon Philips <bphilips@suse.de>

commit d7ac9ad4f480d6e162165ec3f2c8e1bf50003ec3
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Wed Mar 9 10:42:35 2011 -0800

    Fix warning in u32 from assignment in conditional

commit 8988b02ee1d04fdf07b913454b8d4e7b5e3092e5
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Wed Mar 9 10:41:44 2011 -0800

    Fix snprintf with non format

    snprintf was being called with environment variable.
    If variable had format string (like %s) then program would crash.

commit 38c867d2a82d6f2b60450550fbaaadc5d9c77579
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Wed Mar 9 10:41:09 2011 -0800

    Add checks for fgets() when reading proc

    If expected proc headers are missing, catch and print error.

commit 46dc73a57d569bc036c36d922f2699e725b5c1aa
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Wed Mar 9 10:39:17 2011 -0800

    Add no-strict-aliasing to genl

    The genl code uses constructs which violate the strict aliasing
    constraints of gcc 4.4. Disable the optimization to avoid warnings
    and potential breakage.

commit 21cfb5e1d9dfce7612ba622bcaf8e301268a35c8
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Tue Apr 12 14:20:01 2011 -0700

    update to 2.6.39-rc3 headers

commit ac694c333fc543e3ff4b9bc672811a83c3223658
Author: Vlad Dogaru <ddvlad@rosedu.org>
Date:   Wed Feb 2 20:23:40 2011 +0200

    iproute2: support listing devices by group

    User can specify device group to list by using the group keyword:

    	ip link show group test

    If no group is specified, 0 (default) is implied.

    Signed-off-by: Vlad Dogaru <ddvlad@rosedu.org>

commit 77d1e6ab8426c2067616e193800cc201a5dbef47
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Thu Mar 17 10:05:47 2011 -0700

    v2.6.38.1

commit aba383448c2e0c5442c14937b03b02fbbb5be3d1
Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Date:   Tue Jan 11 06:32:46 2011 +0000

    iproute2: allow to specify truncation bits on auth algo

    Hi,

    here is a patch against iproute2 to allow user to set a state with a specific
    auth length.

    Example:
    $ ip xfrm state add src 10.16.0.72 dst 10.16.0.121 proto ah spi 0x10000000
    auth-trunc "sha256" "azertyuiopqsdfghjklmwxcvbn123456" 96 mode tunnel
    $ ip xfrm state
    src 10.16.0.72 dst 10.16.0.121
             proto ah spi 0x10000000 reqid 0 mode tunnel
             replay-window 0
             auth-trunc hmac(sha256)
    0x617a6572747975696f707173646667686a6b6c6d77786376626e313233343536 96
             sel src 0.0.0.0/0 dst 0.0.0.0/0

    Regards,
    Nicolas

    >From 522ed7348cdf3b6f501af2a5a5d989de1696565a Mon Sep 17 00:00:00 2001
    From: Nicolas Dichtel <nicolas.dichtel@6wind.com>
    Date: Thu, 23 Dec 2010 06:48:12 -0500
    Subject: [PATCH] iproute2: allow to specify truncation bits on auth algo

    Attribute XFRMA_ALG_AUTH_TRUNC can be used to specify
    truncation bits, so we add a new algo type: auth-trunc.

    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>

commit 2c19bf6aafc4e4d58de2baab7e0a90cec1f8adc0
Author: Vlad Dogaru <ddvlad@rosedu.org>
Date:   Wed Jan 26 07:35:27 2011 +0000

    iproute2: fix man page whitespace

    Signed-off-by: Vlad Dogaru <ddvlad@rosedu.org>

commit db6b0cfa518de3b27c05bdf3efe05a7f77c4d97d
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date:   Fri Feb 25 12:54:37 2011 -0800

    iproute: rename 'get_jiffies' since it uses msecs

    The get_jiffies() function retrieves rtt-type values in units of
    milliseconds. This patch updates the function name accordingly,
    following the pattern given by dst_metric() <=> dst_metric_rtt().

commit fca1dae821d627101914c36c9282fc244cd92744
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date:   Fri Feb 25 12:51:48 2011 -0800

    iproute: fix unit conversion of rtt/rttvar/rto_min

    Since July 2008 (2.6.27, c1e20f7c8b9), the kernel stores the values for
    RTAX_{RTT{,VAR},RTO_MIN} in milliseconds. When using a kernel > 2.6.27 with
    the current iproute2, conversion of these values is broken in either way.

    This patch
     * updates the code to pass and retrieve milliseconds;
     * since values < 1msec would be rounded up, also drops the usec/nsec variants;
     * since there is no way to query kernel HZ, also drops the jiffies variant.

    Arguments such as
    	rtt		3.23sec
    	rto_min		0xff
    	rto_min		0.200s
    	rttvar		25ms
    now all work as expected when reading back previously set values.

commit 897fb84fd9b872a544076f88430bc35fc12b7cc8
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date:   Tue Dec 21 12:54:09 2010 +0100

    utils: get_jiffies always uses base=0

    get_jiffies() is in all places called in the same manner, with base=0;
    simplify argument list by putting the constant value into the function.

commit 4bb75da2d02ff16af775de0b2d12d07240c73eab
Author: Joy Latten <jml@austin.ibm.com>
Date:   Wed Feb 2 17:32:59 2011 -0600

    xfrm security context support

    Adds security context support to ip xfrm state.

    Signed-off-by: Joy Latten <latten@austin.ibm.com>

commit e5055b591b60e8627fcb18035ef80cf88c48fb7c
Author: Joy Latten <jml@austin.ibm.com>
Date:   Wed Feb 2 17:32:18 2011 -0600

    xfrm security context support

    Adds security context support to ip xfrm policy.

    Signed-off-by: Joy Latten <latten@austin.ibm.com>

commit 2c319e1ab7ebd371c0230f549890ae6c8ba49c8e
Author: Joy Latten <jml@austin.ibm.com>
Date:   Wed Feb 2 17:31:39 2011 -0600

    xfrm security context support

    In the Linux kernel, ipsec policy and SAs can include a
    security context to support MAC networking. This feature
    is often referred to as "labeled ipsec".

    This patchset adds security context support into ip xfrm
    such that a security context can be included when
    add/delete/display SAs and policies with the ip command.
    The user provides the security context when adding
    SAs and policies. If a policy or SA contains a security
    context, the changes allow the security context to be displayed.

    For example,
    ip xfrm state
    src 10.1.1.6 dst 10.1.1.2
    	proto esp spi 0x00000301 reqid 0 mode transport
    	replay-window 0
    	auth hmac(digest_null) 0x3078
    	enc cbc(des3_ede) 0x6970763672656164796c6f676f33646573636263696e3031
    	security context root:system_r:unconfined_t:s0

    Please  let me know if all is ok with the patchset.
    Thanks!!

    regards,
    Joy

    Signed-off-by:  Joy Latten <latten@austin.ibm.com>

commit f0612d566b8bb76866fa772076412d290ed4cf5e
Author: Sridhar Samudrala <sri@us.ibm.com>
Date:   Wed Mar 16 17:01:58 2011 -0700

    macvlan/macvtap: support 'passthru' mode

    Add support for 'passthru' mode when creating a macvlan/macvtap device
    which allows takeover of the underlying device and passing it to a KVM
    guest using virtio with macvtap backend.

    Only one macvlan device is allowed in passthru mode and it inherits
    the mac address from the underlying device and sets it in promiscuous
    mode to receive and forward all the packets.

    Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>

commit fcae78992cab7bd267785b392b438306c621e583
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Tue Mar 15 19:27:36 2011 -0700

    v2.6.38

commit 2230ac1d1871b121284cb163fdf54062663d1ceb
Author: Diego Elio Pettenò <flameeyes@gmail.com>
Date:   Wed Mar 9 10:18:03 2011 -0800

    Remove -L flags from link

    While the previous code was supposed to work nonetheless, it could be
    messed up if further -L were used in LDFLAGS to list the path where glibc's
    libutil was to be found.

    References: https://bugs.gentoo.org/347489

    Signed-off-by: Diego Elio Pettenò <flameeyes@gmail.com>

commit 98f5519cd9db9d1ca58c49af27698101c8fff373
Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Date:   Tue Feb 1 07:29:54 2011 -0500

    iproute2: add support of flag XFRM_STATE_ALIGN4

    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>

commit d5b7420a269e6e220e00cfbd69546d157fac1332
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Fri Feb 25 20:00:54 2011 -0800

    Remove #ifdef's

    The iproute package keeps its own headers so there is no need
    of polluting code with #ifdef's

commit a1e191b90c35f5ef5d7dfba5ad8b5b7a7f57a421
Author: Jiri Pirko <jpirko@redhat.com>
Date:   Fri Feb 25 19:55:19 2011 -0800

    iplink: implement setting of master devic

commit f323f2a32c3b9c29fb91c812472b7fd663f9ae73
Author: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Date:   Tue Jan 11 06:32:46 2011 +0000

    iproute2: allow to specify truncation bits on auth algo

    Hi,

    here is a patch against iproute2 to allow user to set a state with a specific
    auth length.

    Example:
    $ ip xfrm state add src 10.16.0.72 dst 10.16.0.121 proto ah spi 0x10000000
    auth-trunc "sha256" "azertyuiopqsdfghjklmwxcvbn123456" 96 mode tunnel
    $ ip xfrm state
    src 10.16.0.72 dst 10.16.0.121
             proto ah spi 0x10000000 reqid 0 mode tunnel
             replay-window 0
             auth-trunc hmac(sha256)
    0x617a6572747975696f707173646667686a6b6c6d77786376626e313233343536 96
             sel src 0.0.0.0/0 dst 0.0.0.0/0

    Regards,
    Nicolas

    >From 522ed7348cdf3b6f501af2a5a5d989de1696565a Mon Sep 17 00:00:00 2001
    From: Nicolas Dichtel <nicolas.dichtel@6wind.com>
    Date: Thu, 23 Dec 2010 06:48:12 -0500
    Subject: [PATCH] iproute2: allow to specify truncation bits on auth algo

    Attribute XFRMA_ALG_AUTH_TRUNC can be used to specify
    truncation bits, so we add a new algo type: auth-trunc.

    Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>

commit 678b99ee6d80a1e80a3ee404dfb32c4bb3202827
Author: Vlad Dogaru <ddvlad@rosedu.org>
Date:   Wed Jan 26 07:35:27 2011 +0000

    iproute2: fix man page whitespace

    Signed-off-by: Vlad Dogaru <ddvlad@rosedu.org>

commit f3f28c2126343fea70a697fc61392c433e0dc9e1
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Sun Jan 23 00:09:06 2011 +0000

    sfq: add divisor support

    In 2.6.39, we can build SFQ queues with a given hash table size,

commit 81d03dc356df24d55443535eace247b93ff47b4e
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date:   Fri Feb 25 12:54:37 2011 -0800

    iproute: rename 'get_jiffies' since it uses msecs

    The get_jiffies() function retrieves rtt-type values in units of
    milliseconds. This patch updates the function name accordingly,
    following the pattern given by dst_metric() <=> dst_metric_rtt().

commit 9b2cdc00dab7b601938901e20b5e1e66188d388b
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date:   Fri Feb 25 12:51:48 2011 -0800

    iproute: fix unit conversion of rtt/rttvar/rto_min

    Since July 2008 (2.6.27, c1e20f7c8b9), the kernel stores the values for
    RTAX_{RTT{,VAR},RTO_MIN} in milliseconds. When using a kernel > 2.6.27 with
    the current iproute2, conversion of these values is broken in either way.

    This patch
     * updates the code to pass and retrieve milliseconds;
     * since values < 1msec would be rounded up, also drops the usec/nsec variants;
     * since there is no way to query kernel HZ, also drops the jiffies variant.

    Arguments such as
    	rtt		3.23sec
    	rto_min		0xff
    	rto_min		0.200s
    	rttvar		25ms
    now all work as expected when reading back previously set values.

commit 94089ef7726cc25bffbd133fe5e1e16e0fd4654e
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date:   Tue Dec 21 12:54:09 2010 +0100

    utils: get_jiffies always uses base=0

    get_jiffies() is in all places called in the same manner, with base=0;
    simplify argument list by putting the constant value into the function.

commit 0c7a594541df84d3497681a8ecc09b05c1449dd0
Author: Joy Latten <jml@austin.ibm.com>
Date:   Wed Feb 2 17:32:59 2011 -0600

    xfrm security context support

    Adds security context support to ip xfrm state.

    Signed-off-by: Joy Latten <latten@austin.ibm.com>

commit e4f054f017d0daa7ff9bba6027c5df264999ff1a
Author: Joy Latten <jml@austin.ibm.com>
Date:   Wed Feb 2 17:32:18 2011 -0600

    xfrm security context support

    Adds security context support to ip xfrm policy.

    Signed-off-by: Joy Latten <latten@austin.ibm.com>

commit b2bb289a57fe7be63ebe0d1fe6ff94555bf6c936
Author: Joy Latten <jml@austin.ibm.com>
Date:   Wed Feb 2 17:31:39 2011 -0600

    xfrm security context support

    In the Linux kernel, ipsec policy and SAs can include a
    security context to support MAC networking. This feature
    is often referred to as "labeled ipsec".

    This patchset adds security context support into ip xfrm
    such that a security context can be included when
    add/delete/display SAs and policies with the ip command.
    The user provides the security context when adding
    SAs and policies. If a policy or SA contains a security
    context, the changes allow the security context to be displayed.

    For example,
    ip xfrm state
    src 10.1.1.6 dst 10.1.1.2
    	proto esp spi 0x00000301 reqid 0 mode transport
    	replay-window 0
    	auth hmac(digest_null) 0x3078
    	enc cbc(des3_ede) 0x6970763672656164796c6f676f33646573636263696e3031
    	security context root:system_r:unconfined_t:s0

    Please  let me know if all is ok with the patchset.
    Thanks!!

    regards,
    Joy

    Signed-off-by:  Joy Latten <latten@austin.ibm.com>

commit db02608b6f408998ea8c823fb791cead3e574f50
Author: Vlad Dogaru <ddvlad@rosedu.org>
Date:   Wed Feb 2 20:23:41 2011 +0200

    iproute2: support device group semantics

    Add the group keyword to ip link set, which has the following meaning:
    If both a group and a device name are pressent, we change the device's
    group to the specified one. If only a group is present, then the
    operation specified by the rest of the command should apply on an entire
    group, not a single device.

    So, to set eth0 to the default group, one would use
    	ip link set dev eth0 group default

    Conversely, to set all the devices in the default group down, use
    	ip link set group default down

    Signed-off-by: Vlad Dogaru <ddvlad@rosedu.org>

commit 26ad3aecfeeb93cd396a199a5e664e749bcabc8d
Author: Vlad Dogaru <ddvlad@rosedu.org>
Date:   Wed Feb 2 20:23:41 2011 +0200

    iproute2: support device group semantics

    Add the group keyword to ip link set, which has the following meaning:
    If both a group and a device name are pressent, we change the device's
    group to the specified one. If only a group is present, then the
    operation specified by the rest of the command should apply on an entire
    group, not a single device.

    So, to set eth0 to the default group, one would use
    	ip link set dev eth0 group default

    Conversely, to set all the devices in the default group down, use
    	ip link set group default down

    Signed-off-by: Vlad Dogaru <ddvlad@rosedu.org>

commit f960c92aac1838e0f336c0ca0f657bb55a42d8e9
Author: Vlad Dogaru <ddvlad@rosedu.org>
Date:   Wed Feb 2 20:23:40 2011 +0200

    iproute2: support listing devices by group

    User can specify device group to list by using the group keyword:

    	ip link show group test

    If no group is specified, 0 (default) is implied.

    Signed-off-by: Vlad Dogaru <ddvlad@rosedu.org>

commit dd4b25a0f9d696e29a12f6c25a87aace36ce6a15
Merge: 08dc32e 1551198
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Fri Feb 25 12:35:01 2011 -0800

    Merge branch 'choke' into net-next

    Conflicts:
    	include/linux/pkt_sched.h

commit 08dc32e13065a182551f3e034db8ad6ad3390c62
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Fri Feb 25 12:31:36 2011 -0800

    update to net-next (2.6.39) headers

commit 1551198b40d0ea8abd9dc3072386dc78d05b6bbc
Merge: a4eca97 1598b9e
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Sun Feb 20 12:35:40 2011 -0800

    Merge branch 'master' into choke

commit a4eca97cff0391d73b4ad4d5598cdc9a35771fa4
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Thu Jan 13 09:23:17 2011 -0800

    CHOKe scheduler

    TC commands for CHOKe qdisc

commit 1598b9ef7b6704af5126d632e324323703ca8112
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Thu Jan 13 14:53:02 2011 -0800

    Revert "iproute2: add VF_PORT support"

    This reverts commit 632110aa0db4518b33fc09189ffcdd1b2e2e1762.

    There seem to be some recent changes in the 802.1Qbh/bg specs which may
    result in changes to this patch in the near future. It seems like its best
    to ignore this patch for now.
    I will re-spin at a later time when the changes in the specs converge.

    BTW, Please let me know if I should CC netdev list and others on the
    original email. I can resend this email.

    Thanks,
    Roopa

commit 632110aa0db4518b33fc09189ffcdd1b2e2e1762
Author: Roopa Prabhu <roprabhu@cisco.com>
Date:   Tue Nov 9 14:47:52 2010 +0000

    iproute2: add VF_PORT support

    Resubmitting Scott Feldmans original patch with below changes

    - Fix port profile strlen which was off by 1
    - Added function to convert IFLA_PORT_RESPONSE codes to string

    Add support for IFLA_VF_PORTS.  VF port netlink msg layout is

            [IFLA_NUM_VF]
            [IFLA_VF_PORTS]
                    [IFLA_VF_PORT]
                            [IFLA_PORT_*], ...
                    [IFLA_VF_PORT]
                            [IFLA_PORT_*], ...
                    ...
            [IFLA_PORT_SELF]
                    [IFLA_PORT_*], ...

    The iproute2 cmd line for link set is now:

    Usage: ip link add link DEV [ name ] NAME
                       [ txqueuelen PACKETS ]
                       [ address LLADDR ]
                       [ broadcast LLADDR ]
                       [ mtu MTU ]
                       type TYPE [ ARGS ]
           ip link delete DEV type TYPE [ ARGS ]

           ip link set DEVICE [ { up | down } ]
                              [ arp { on | off } ]
                              [ dynamic { on | off } ]
                              [ multicast { on | off } ]
                              [ allmulticast { on | off } ]
                              [ promisc { on | off } ]
                              [ trailers { on | off } ]
                              [ txqueuelen PACKETS ]
                              [ name NEWNAME ]
                              [ address LLADDR ]
                              [ broadcast LLADDR ]
                              [ mtu MTU ]
                              [ netns PID ]
                              [ alias NAME ]
                              [ port MODE { PROFILE | VSI } ]
                              [ vf NUM [ mac LLADDR ]
                                       [ vlan VLANID [ qos VLAN-QOS ] ]
                                       [ rate TXRATE ]
                                       [ port MODE { PROFILE | VSI } ] ]
           ip link show [ DEVICE ]

    TYPE := { vlan | veth | vcan | dummy | ifb | macvlan | can }
    MODE := { assoc | preassoc | preassocrr | disassoc }
    PROFILE := profile PROFILE
               [ instance UUID ]
               [ host UUID ]
    VSI := vsi mgr MGRID type VTID ver VER
           [ instance UUID ]

    Signed-off-by: Scott Feldman <scofeldm@cisco.com>
    Signed-off-by: Roopa Prabhu <roprabhu@cisco.com>

commit 9351fec72d2bb4e7501c12949855ab252b037bce
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Wed Jan 12 18:46:54 2011 -0800

    Update to lasest kernel headers

commit f2c45d705036969027c63312a91e6e5713ff9376
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Fri Jan 7 09:54:30 2011 -0800

    v2.6.37

commit 8552b387df5ff1c1df2b0a8e6585b53928838471
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Wed Dec 29 15:05:48 2010 -0800

    Update to 2.6.37-rc8 headers

    Use sanitized headers from 2.6.37-rc8

commit 5c68fc88c5c4346d4d80dddb79b453796ab9b4d2
Author: Petr Sabata <psabata@redhat.com>
Date:   Thu Dec 16 17:24:54 2010 +0100

    ip: Few typo and grammar errors fixes for ip(8) manpage

commit 4b3385f6c593b2a37a3ee5dca3a8dbc1d1392d86
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Fri Dec 10 11:49:29 2010 -0800

    Cleanup ll_map

    In preparation for adding name hash:
      * add const
      * use same types in cache as ifinfomsg
      * rename idxmap to ll_cache

commit 30564237282c497649f04b20e791de420004e3a5
Author: Octavian Purdila <opurdila@ixiacom.com>
Date:   Fri Dec 10 16:59:50 2010 +0200

    iproute2: initialize the ll_map only once

    Avoid initializing the LL map (which involves a costly RTNL dump)
    multiple times. This can happen when running in batch mode.

    Signed-off-by: Octavian Purdila <opurdila@ixiacom.com>

commit 1e21ea71a7e12e6bd06ece8cf415e7a5f372c806
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Fri Dec 10 09:46:24 2010 -0800

    Increase size of ifindex hash heads

    The default of 16 is too small for users with 10,000 interfaces.

commit 1da5f6b2ca916400a2cb6ef59608c6c9d5b90c8c
Author: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Date:   Thu Dec 9 09:39:47 2010 -0800

    tc-red: typo in man page

commit d98e300c335a13927ed352c6bd02547b363ec0ec
Author: Petr Sabata <psabata@redhat.com>
Date:   Wed Dec 8 14:49:09 2010 +0100

    ss: Change "do now" to "do not" in ss(8), -n option

    A small typo fix.

commit f4ff11e3e298d457c4f30813e305f7d27d89823a
Author: Dan Smith <danms@us.ibm.com>
Date:   Wed Dec 1 11:24:58 2010 -0800

    Add ip route save/restore

    This patch adds save and restore commands to "ip route". Save dumps
    the RTNL stream to stdout which can then be passed to restore later.
    This may be helpful in some normal situations, and will allow C/R to
    migrate the routing information in userspace.  Tweaking of the stream
    can be done by userspace helpers to convert between versions and adjust
    things like device indexes when restoring routes in a different
    environment.

    By factoring out some of the common bits of print_route() into
    filter_nlmsg(), the "save" command can use the same selection logic
    as "list," allowing the caller to save only specific routes as
    necessary.

    The only change since the RFC is the addition of manpage and doc
    material.

    Signed-off-by: Dan Smith <danms@us.ibm.com>

commit 3822cc986cc33751b82a22b91289ef088d94440c
Author: Gregoire Baron <baronchon@n7mm.org>
Date:   Wed Dec 1 11:17:46 2010 -0800

    tc: add ACT_CSUM action support (csum)

    Add the iproute2 support for the ACT_CSUM action. Can be used as
    following, certainly in conjunction with the ACT_PEDIT action (pedit):

     # In order to DNAT (stateless) IPv4 packet from 192.168.1.100 to
     #  0x12345678 (18.52.86.120), and update the IPv4 header checksum and
     #  the UDP checksum (the last one, only if the packet is UDP).
    tc filter add eth0 prio 1 protocol ip parent ffff: \
      u32 match ip src 192.168.1.100/32 flowid :1 \
        action pedit munge offset 16 u32 set 0x12345678 \
          pipe csum ip and udp

     # In order to alter destination address of IPv6 TCP packets from fc00::1
     #  and correct the TCP checksum (nothing happened? except maybe for
     #  checksums in the TCP payload ...).
    tc filter add eth0 prio 1 protocol ipv6 parent ffff: \
      u32 match ip6 src fc00::1/128 match ip6 protocol 0x06 0xff flowid :1 \
        action pedit munge offset 24 u32 set 0x12345678 \
          pipe csum tcp

commit 64c7956061500611061910067d76512afcd2ddb4
Author: Ben Greear <greearb@candelatech.com>
Date:   Wed Dec 1 11:13:51 2010 -0800

    Allow 'ip addr flush' to loop more than 10 times

    The default remains at 10 for backwards compatibility.

    For instance:
     # ip addr flush dev eth2
     *** Flush remains incomplete after 10 rounds. ***
     # ip -l 20 addr flush dev eth2
     *** Flush remains incomplete after 20 rounds. ***
     # ip -loops 0 addr flush dev eth2
     #

    This is useful for getting rid of large numbers of IP
    addresses in scripts.

    Signed-off-by: Ben Greear <greearb@candelatech.com>

commit 3f0a7b4c4f0a6c5462ad55b7fa4445c2d485f435
Author: Sridhar Samudrala <sri@us.ibm.com>
Date:   Thu Oct 28 13:10:40 2010 +0000

    Support 'mode' parameter when creating macvtap device

    Add support for 'mode' parameter when creating a macvtap device.
    This allows a macvtap device to be created in bridge, private or
    the default vepa modes.

    Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>

    -------------------------------------------------------------------
    Acked-by: Arnd Bergmann <arnd@arndb.de>

commit f66efadd79f75c61642d90e0b64081b4e0edf61c
Author: Andreas Schwab <schwab@linux-m68k.org>
Date:   Fri Nov 5 23:26:29 2010 +0000

    iproute2: remove useless use of buffer

    Print directly to the file instead of going through a buffer.

    Signed-off-by: Andreas Schwab <schwab@linux-m68k.org>

commit 7162c921488de9093c522b858a1ab488b8f50c96
Author: Changli Gao <xiaosuo@gmail.com>
Date:   Sat Aug 21 06:30:01 2010 +0000

    iproute2: tc: f_flow: add key rxhash

    We can use rxhash to classify the traffic into flows. As rxhash maybe
    supplied by NIC or RPS, it is cheaper.

    Signed-off-by: Changli Gao <xiaosuo@gmail.com>
    Acked-by: Jamal Hadi Salim <hadi@cyberus.ca>

commit 4a9608e6aefe40cf8545097ed23931f9bacba06d
Author: Timo Teräs <timo.teras@iki.fi>
Date:   Tue Nov 23 22:18:58 2010 +0000

    iproute2: support xfrm upper protocol gre key

    Similar to tunnel side: accept dotted-quad and number formats.
    Use regular number for printing the key.

    Signed-off-by: Timo Teräs <timo.teras@iki.fi>

commit 6f4f7c464ad4121582594f03163c2b5f324d4b4b
Author: Timo Teräs <timo.teras@iki.fi>
Date:   Tue Nov 23 22:18:57 2010 +0000

    iproute2: treat gre key as number

    Print GRE key as a regular number. It is not really an IPv4 address
    and this is also how Cisco and Juniper treats GRE keys. Do keep the
    parsing of dotted-quad format for backwards compatibility.

    Signed-off-by: Timo Teräs <timo.teras@iki.fi>

commit be3c4d4f3c14875e459d27b8b095e29af8591489
Author: Mike Frysinger <vapier@gentoo.org>
Date:   Sun Nov 21 16:16:54 2010 -0500

    m_xt: stop using xtables_set_revision()

    iptables dropped the xtables_set_revision() function around version 1.4.9,
    so set the rev directly ourselves.  This should be compatible back to the
    original version m_xt itself is designed for.

    Signed-off-by: Mike Frysinger <vapier@gentoo.org>

commit 5d8056357a032131057462fadb77c62cab6b2f0f
Author: Petr Sabata <psabata@redhat.com>
Date:   Mon Nov 29 14:00:37 2010 +0100

    ss(8) improvements by Jiri Popelka <jpopelka@redhat.com>

commit ea71beacacb9ebf756bbc250c71df59ec2f46243
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Sun Nov 28 10:35:28 2010 -0800

    Use standard routines for interface name to index etc

    Use the available libraries for mapping from interface index to name
    or type. This should speed up display with lots of interfaces

commit 82408fc17dcc44ccfad82ad7ae00fc815b311b98
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Thu Nov 18 15:25:38 2010 -0800

    Workaround for repeated distclean

    The subdirectory makefiles need Config file to exist.
    Therefore create it, then run make clean, then remove it.

commit 3f5c1a01e6bc15593635705aa0b19dcac965be26
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Wed Oct 20 17:38:04 2010 -0700

    Update to 2.6.36 headers

    Use santized headers from 2.6.36 release

commit 66abc090724a14baa0b931ecab4ea22ce91c4fb0
Author: Ulrich Weber <uweber@astaro.com>
Date:   Mon Sep 13 08:23:01 2010 -0700

    iproute2: display xfrm socket policy direction

    display socket policy direction

    Signed-off-by: Ulrich Weber <uweber@astaro.com>

commit cb4bd0ec8dcba856d1ebf8b3f72b79f669dad0f4
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Wed Aug 25 09:04:55 2010 -0700

    Fix GRED options clearing

    Bug reported where priorities of GRED DP's are ignored.
    The option parsing sets opt then memset was clearing these
    values.

commit a571587d0b27a2c1492019c3abeb6fb0c0e606ce
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Mon Aug 23 21:44:56 2010 +0200

    iproute2: add 64bit support to ifstat

    Le lundi 23 août 2010 à 10:33 -0700, Stephen Hemminger a écrit :

    > I think this breaks the wraparound detection code in this command.
    >
    >

    OK lets fix the bug only, before adding 64bit counters capabilities.

    Thanks

    [PATCH] iproute2: add 64bit arches support to ifstat

    ifstat assumes IFLA_STATS fields are "unsigned long", but they are
    __u32. This fix is needed to let ifstat run on 64bit arches.

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit daf7bd5c73aa3b7c91d83abf500c8749bec6e6d5
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Mon Aug 23 09:13:05 2010 -0700

    Use correct rt_link_statistics

    In recent kernels, net_device_stats is not exposed and the code
    shoulf have used rt_link_statistics.  Also, fix use of sprintf
    with user supplied value.

commit b0373bfbbcc82fa68d3c7f0507cf4b1d8c54268b
Author: Eric Dumazet <eric.dumazet@gmail.com>
Date:   Wed Jul 21 11:42:50 2010 +0200

    ip: add RTA_MARK support

    Adds support for RTA_MARK rt attribute added in linux-2.6.36

    $ ip route get ADDR mark 4
    192.168.20.110 dev eth1  src 192.168.20.108  mark 4
        cache  mtu 1500 advmss 1460 hoplimit 64

    $ ip route get 192.168.20.108 from ADDR iif STRING mark 256
    local 192.168.20.108 from 192.168.20.110 dev lo  src 192.168.20.108  mark 0x100
        cache <local,src-direct>  iif eth1

    $ ip route list cache [ADDR] mark NUMBER

    Hexadecimal output if mark >= 16
    null marks are not displayed.

    Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>

commit 04a9fc0a50f9a7677f22c9746cf2f4aadc2c8257
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Mon Aug 23 08:35:08 2010 -0700

    Update kernel headers to 2.6.36-rc2

commit daa10c8af6031f10168639b7fd3c181a5d788ee1
Author: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date:   Mon Aug 23 08:14:38 2010 -0700

    Snapshot for 2.6.35.1

commit c73f3e02f8ae25e5daad0367690a3069895dd8a3
Author: Ulrich Weber <uweber@astaro.com>
Date:   Thu Aug 12 11:05:19 2010 +0200

    iproute2: dont filter cached routes on iproute_get

    iproute_get will return cloned routes for IPv4
    and cloned as well non-cloned routes for IPv6.

    Therefore RTM_F_CLONED flag should not be checked
    for iproute_get routes. Check in print_route will
    always fail because valid values are 0 and 1.

    Signed-off-by: Ulrich Weber <uweber@astaro.com>

commit 3bc1c4f29777171b484d36abf673667e3729202b
Author: Ben Greear <greearb@candelatech.com>
Date:   Mon Aug 16 10:00:08 2010 -0700

    iproute2: Fix filtering related to flushing IP addresses.

    The old 'ip addr flush' logic had several flaws:

    * It reversed logic for primary v/s secondary flags
      (though, it sort of worked right anyway)

    * The code tried to remove secondaries and then primaries,
      but in practice, it always removed one primary per loop,
      which not at all efficient.

    * The filter logic in the core would run only the first
      filter in most cases.

    * If you used '-s -s', the ifa_flags member would be
      modified, which could make future filters fail
      to function fine.

    This patch attempts to fix all of these issues.

    Tested-by: Brian Haley <brian.haley@hp.com>
    Signed-off-by: Ben Greear <greearb@candelatech.com>

Change-Id: I813de16171179f4e1c985c340024c75dfc65ff23