Several log flags are ignored by the function. Add a comment explaining why this is correct. Signed-off-by: Phil Sutter <phil@xxxxxx> --- extensions/libebt_log.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/extensions/libebt_log.c b/extensions/libebt_log.c index 47708d79310e0..13c7fafecb11e 100644 --- a/extensions/libebt_log.c +++ b/extensions/libebt_log.c @@ -191,6 +191,8 @@ static int brlog_xlate(struct xt_xlate *xl, if (loginfo->loglevel != LOG_DEFAULT_LEVEL) xt_xlate_add(xl, " level %s", eight_priority[loginfo->loglevel].c_name); + /* ebt_log always decodes MAC header, nft_log always decodes upper header - + * so set flags ether and ignore EBT_LOG_IP, EBT_LOG_ARP and EBT_LOG_IP6 */ xt_xlate_add(xl, " flags ether "); return 1; -- 2.38.0
