Reversed byte order issue with nft ?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

When doing 'nft list ruleset', I get a bad result (see below), fields appear as "unknown" and/or as numeric values.

Running 'nft' with gdb, it looks like something is wrong with byte ordering:

In function symbolic_constant_print(), mpz_export_data() return a strange val.
First time we go there, we get 0x800000000
Next time, we get 0x400000000
Last time, we get 0x200000000
While we expect 8(new), 4(related), 2(established)

Any idea on what to do ?

Target is a powerpc (big endian), everything is cross-compiled using GNU tools on x86 (little endian)

kernel 3.18-rc7
nftables-20141121
libnftnl-20141121
gmp-4.3.2
libmnl-1.0.3
libnfnetlink-1.0.1
libnetfilter_conntrack-1.0.4

Thanks
Christophe

# uname -a
Linux vgoip 3.18.0-rc7-local-dirty #94 PREEMPT Wed Dec 3 17:25:41 CET 2014 ppc GNU/Linux
# nft -f /etc/nftables.conf
# nft list ruleset
table ip filter {
        chain input {
                 type filter hook input priority 0;
                 oifname "lo" accept
                 ct state { 4, 2} accept
                 ct state 8 unknown unknown 0x16 [invalid type] accept
                 ip protocol icmp accept
        }

        chain forward {
                 type filter hook forward priority 0;
                 drop
        }
}

# cat /etc/nftables.conf
flush ruleset
table ip filter {
        chain input {
                 type filter hook input priority 0;
                 oifname "lo" accept
                 ct state { established, related} accept
                 ct state new tcp dport 22 accept
                 ip protocol icmp accept
        }

        chain forward {
                 type filter hook forward priority 0;
                 drop
        }
}


--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux