On Sunday 2012-12-16 01:27, Pablo Neira Ayuso wrote: >On Sat, Dec 15, 2012 at 04:19:29PM -0500, Jamal Hadi Salim wrote: >> Example, the following should work for >> tc filter add dev eth0 parent ffff: protocol ip u32 match u32 0 0 >> action ipt -j CONNMARK \ >> action mirred egress redirect dev ifb0 >> >commit 7299fa4b615d7f7ee12cde444266f6b31f667f9f > libxt_CONNMARK: use guided option parser > >BTW, I think it would be good if we find the way to check for >libxtables current version (see iptables/configure.ac), so you can >know that we broke binary compatibility again. For the C level, there is XTABLES_VERSION_CODE. #if XTABLES_VERSION_CODE >= 6 if (m != NULL && m->x6_parse != NULL) m->x6_parse(...) #else else if (m != NULL && m->parse != NULL) m->parse(...) ... We can also export this through pkgconfig, similar to how downstream users are to discover the plugin dir (`pkg-config xtables --variable libdir`). -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html