Hi Florian, On Sun, May 26, 2013 at 10:48:09PM +0200, Florian Westphal wrote: > The common case is that TCP/IP checksums have already been > verified, e.g. by hardware (rx checksum offload), or conntrack. > > Userspace can use this flag to determine when the checksum > has not been validated yet. > > If the flag is set, this doesn't necessarily mean that the packet has > an invalid checksum, e.g. if NIC doesn't support rx checksum. > > Userspace that sucessfully enabled NFQA_CFG_F_GSO queue feature flag can > infer that IP/TCP checksum has already been validated if either the > SKB_INFO attribute is not present or the NFQA_SKB_CSUM_NOTVERIFIED > flag is unset. I have applied this patch to nf-next, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html