On 15. Februar 2014 13:36:13 GMT+00:00, Florian Westphal <fw@xxxxxxxxx> wrote: >Nikolay Aleksandrov <nikolay@xxxxxxxxxx> wrote: >> The new "write" expression can be used to manipulate packet data. > >Thanks. This is very useful feature (needed also for TCPMSS mangling >for instance). > >General question: How are/should packet checksums be handled after >packet >content was altered? Good question indeed. I guess we need to make this dependant on the payload base and protocols involved. LuckIly in most cases we can rely on checksum offload to take care of this. Maybe we can have userspace specify the necessary parameters such as the checksum position and whether a pseudo header is used. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html