On Wed, Apr 02, 2014 at 06:23:03PM +0200, Arturo Borrero Gonzalez wrote:
> Hi there!
>
> I've been testing nftables at sparc, looking for endianess issues.
Great, I meant to do this for a long time.
> Unfortunately, weird things happened.
>
> Adding some rule:
>
> % nft add table filter
> % nft add chain filter input
> % nft add rule filter input tcp dport 22 counter
> % nft list table filter
> table ip filter {
> chain input {
> payload @th,16,16 0x0 [invalid type] counter packets 0 bytes 0
> }
> }
>
> However, matching happened when I generated some traffic.
So it appears we only have a problem in userspace? That's at least partially
good news. Could you provide access to that machine for debugging?
> Also, compiling the nft cli tool:
>
> % make
> -e CC src/main.c
> src/main.c: In function 'nft_netlink':
> src/main.c:176:2: warning: cast increases required alignment of target
> type [-Wcast-align]
It appears all of these originate from the list iterator macros.
I guess its container_of() and the cast to (type *)(char *)ptr ...
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
