Re: [PATCH] netfilter: audit target to record accepted/dropped packets

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Friday 2011-01-14 17:19, Thomas Graf wrote:

>On Fri, Jan 14, 2011 at 04:46:03PM +0100, Patrick McHardy wrote:
>> This won't work in the AF_INET/LOCAL_OUT hook, skb->dev is set just
>> before the packet is handed to the POST_ROUTING hook. The ethernet
>> header is also only present on incoming packets.
>
>Aha, that is the reason for in && !out in ipt_LOG then.

Actually, it reads if (in != NULL), because the MAC header of an 
incoming packet is retained in FORWARD before it is later replaced 
by the new neigh type.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux