Vieri Di Paola <vieridipaola@xxxxxxxxx> wrote:
> On Tue, Feb 18, 2020 at 1:39 PM Florian Westphal <fw@xxxxxxxxx> wrote:
> >
> > get this patch working (untested)
>
> > +static uint32_t nfq_get_pktinfo(struct nfq_data *nfad)
> > +{
> > + return ntohl(nfnl_get_data(nfad->data, NFQA_SKB_INFO, uint32_t));
>
> I applied the patch, but I get this compilation error:
>
> In file included from suricata-common.h:180,
> from source-nfq.c:28:
> source-nfq.c: In function 'nfq_get_pktinfo':
> source-nfq.c:404:48: error: 'NFQA_SKB_INFO' undeclared (first use in
> this function)
> 404 | return ntohl(nfnl_get_data(nfad->data, NFQA_SKB_INFO,
> uint32_t));
> | ^~~~~~~~~~~~~
This means your kernel headers are older than 3.10.
It should be part of /usr/include/linux/netfilter/nfnetlink_queue.h .
You can substitute 14 instead, or add
#define NFQA_SKB_INFO 14
> I'll post to the suricata ML asap.
Thanks.
