SACK-IMMEDIATELY extension has defined in: http://tools.ietf.org/html/draft-tuexen-tsvwg-sctp-sack-immediately-03. And the latest kernel has added a I flag in DATA chunk to support this extension. So let iptables/netfilter can trace it. Signed-off-by: Shan Wei<shanwei@xxxxxxxxxxxxxx> --- extensions/libxt_sctp.c | 2 +- extensions/libxt_sctp.man | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/extensions/libxt_sctp.c b/extensions/libxt_sctp.c index 441f12e..92bdb07 100644 --- a/extensions/libxt_sctp.c +++ b/extensions/libxt_sctp.c @@ -97,7 +97,7 @@ struct sctp_chunk_names { /*'ALL' and 'NONE' will be treated specially. */ static const struct sctp_chunk_names sctp_chunk_names[] -= { { .name = "DATA", .chunk_type = 0, .valid_flags = "-----UBE"}, += { { .name = "DATA", .chunk_type = 0, .valid_flags = "----IUBE"}, { .name = "INIT", .chunk_type = 1, .valid_flags = "--------"}, { .name = "INIT_ACK", .chunk_type = 2, .valid_flags = "--------"}, { .name = "SACK", .chunk_type = 3, .valid_flags = "--------"}, diff --git a/extensions/libxt_sctp.man b/extensions/libxt_sctp.man index 1ecf05c..01a2e79 100644 --- a/extensions/libxt_sctp.man +++ b/extensions/libxt_sctp.man @@ -11,7 +11,7 @@ Chunk types: DATA INIT INIT_ACK SACK HEARTBEAT HEARTBEAT_ACK ABORT SHUTDOWN SHUT chunk type available flags .br -DATA U B E u b e +DATA I U B E i u b e .br ABORT T t .br -- 1.6.3.3 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
