On Tuesday 2008-12-16 20:59, Jozsef Kadlecsik wrote: > >The packets in question are shorter than the IP header. How would those be >delivered to the host? On the LAN it might be possible to forge such >packets with proper HW address and be delivered. But wouldn't the network >card or the stack itself throw away the packets?? Yes. >> The message is also utterly useless. What kind of action would you take >> to a few gigabytes of "ipt_hook: happy cracking.\n" ? >> There's no IP address logged, or any other useful information. > >As the packet is shorter than the IP header, what could be logged, besides >the fact that something worth to investigate is happening? Find the offending process? printk current->pid. 'current' should be available in the output path, but don't quote me on that. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html