Julien Moutinho <julm+netfilter@xxxxxxxxxxxxxx> wrote: [ moving to nf-devel ] > Hi netfilter@, > > Apparently matching beyond 2040 bits (255 bytes) starts again at 0 or something like that. > Not sure whether this is intended or not, > but in this case a warning would be appreciated. This is a kernel bug, the offset is truncated to u8 (modulo 256).
