Re: ulogd2, sqlite3 and negative TCP Seq numbers

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Dňa 8. 3. o 11:45 Adam Nielsen napísal(a):
Not all are logged as negative, i collet (and pair) all yet logged:

    LOGEMU         SQLITE3
    3489577139 -> -805390157

If I run this in bash:

   $ echo $[0x100000000 - 3489577139]
   805390157

For now i add trigger into SQLite DB, to correct value if it is less than zero, seems to work::

    CREATE TRIGGER ulogd_fixsig1
    AFTER INSERT ON ulog_pkt WHEN NEW.tcp_seq < 0 BEGIN
    UPDATE ulog_pkt SET tcp_seq = NEW.tcp_seq + (1<<32)
        WHERE rowid = NEW.rowid;
    END;

Please, can someone take look on it in ulogd2 code?

--
Slavko
https://www.slavino.sk/





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux