On Tue, Aug 20, 2019 at 03:11:46PM +0200, Michael Braun wrote: > Currently, there is no vlan information (e.g. when used with a vlan aware > bridge) passed to userspache, HWHEADER will contain an 08 00 (ip) suffix > even for tagged ip packets. > > Therefore, add an extra netlink attribute that passes the vlan information > to userspace similarly to 15824ab29f for nfqueue. Applied, with one minor glitch. [...] > diff --git a/net/netfilter/nf_log_common.c b/net/netfilter/nf_log_common.c > index ae5628ddbe6d..c127bcc119d8 100644 > --- a/net/netfilter/nf_log_common.c > +++ b/net/netfilter/nf_log_common.c > @@ -167,6 +167,8 @@ nf_log_dump_packet_common(struct nf_log_buf *m, u_int8_t pf, > physoutdev = nf_bridge_get_physoutdev(skb); > if (physoutdev && out != physoutdev) > nf_log_buf_add(m, "PHYSOUT=%s ", physoutdev->name); > + if (skb_vlan_tag_present(skb)) > + nf_log_buf_add(m, "VLAN=%d ", skb_vlan_tag_get_id(skb)); > #endif > } > EXPORT_SYMBOL_GPL(nf_log_dump_packet_common); I have kept this chunk behind. I think exposing the VPROTO would be useful too. Just send a separated patch for this for review, thanks.