Re: [PATCH 2/2] netfilter: log invalid new icmpv6 packet with nf_log_packet().

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Jan 29, 2009 at 09:36:22PM +0100, Eric Leblond wrote:
> --- a/net/ipv6/netfilter/nf_conntrack_proto_icmpv6.c
> +++ b/net/ipv6/netfilter/nf_conntrack_proto_icmpv6.c
> @@ -126,6 +126,10 @@ static bool icmpv6_new(struct nf_conn *ct, const struct sk_buff *skb,
>  		pr_debug("icmpv6: can't create new conn with type %u\n",
>  			 type + 128);
>  		nf_ct_dump_tuple_ipv6(&ct->tuplehash[0].tuple);
> +		if (LOG_INVALID(&init_net, IPPROTO_ICMPV6))

netns is nf_ct_net(ct) at this point, not &init_net.

> +			nf_log_packet(PF_INET6, 0, skb, NULL, NULL, NULL,
> +				      "nf_ct_icmpv6: invalid new with type %d ",
> +				      type + 128);
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux