On Thu, Jan 29, 2009 at 09:36:22PM +0100, Eric Leblond wrote: > --- a/net/ipv6/netfilter/nf_conntrack_proto_icmpv6.c > +++ b/net/ipv6/netfilter/nf_conntrack_proto_icmpv6.c > @@ -126,6 +126,10 @@ static bool icmpv6_new(struct nf_conn *ct, const struct sk_buff *skb, > pr_debug("icmpv6: can't create new conn with type %u\n", > type + 128); > nf_ct_dump_tuple_ipv6(&ct->tuplehash[0].tuple); > + if (LOG_INVALID(&init_net, IPPROTO_ICMPV6)) netns is nf_ct_net(ct) at this point, not &init_net. > + nf_log_packet(PF_INET6, 0, skb, NULL, NULL, NULL, > + "nf_ct_icmpv6: invalid new with type %d ", > + type + 128); -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html