matchoff is relative to dataoff, i.e. matchoff=0 (as utilized by
nfq_tcp_mangle_ipv4()) points to the first byte of the TCP payload.
Signed-off-by: Kevin Cernekee <cernekee@xxxxxxxxxxxx>
---
src/helpers/ftp.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/helpers/ftp.c b/src/helpers/ftp.c
index 3da6e56..27ab5eb 100644
--- a/src/helpers/ftp.c
+++ b/src/helpers/ftp.c
@@ -511,7 +511,7 @@ ftp_helper_cb(struct pkt_buff *pkt, uint32_t protoff,
goto out_update_nl;
pr_debug("conntrack_ftp: match `%.*s' (%u bytes at %u)\n",
- matchlen, pktb_network_header(pkt) + matchoff,
+ matchlen, pktb_network_header(pkt) + dataoff + matchoff,
matchlen, ntohl(th->seq) + matchoff);
/* We refer to the reverse direction ("!dir") tuples here,
--
1.9.1
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
