Andrei Vagin <avagin@xxxxxxxxx> wrote: > diff --git a/net/netfilter/nf_conntrack_proto.c b/net/netfilter/nf_conntrack_proto.c > index b9403a266a2e..37bb530d848f 100644 > --- a/net/netfilter/nf_conntrack_proto.c > +++ b/net/netfilter/nf_conntrack_proto.c > @@ -55,7 +55,7 @@ void nf_l4proto_log_invalid(const struct sk_buff *skb, > struct va_format vaf; > va_list args; > > - if (net->ct.sysctl_log_invalid != protonum || > + if (net->ct.sysctl_log_invalid != protonum && > net->ct.sysctl_log_invalid != IPPROTO_RAW) Urgh, thanks for fixing this. Acked-by: Florian Westphal <fw@xxxxxxxxx>