diff options
| author |   Jesse Gross <jesse@nicira.com> | 2011-11-30 17:05:51 -0800 |
|---|---|---|
| committer | Jesse Gross <jesse@nicira.com> | 2011-12-03 09:35:10 -0800 |
| commit | 75f2811c6460ccc59d83c66059943ce9c9f81a18 (patch) | |
| tree | 49373cf5f5b11358aeb587209ad270496f751609 /net/netfilter/xt_AUDIT.c | |
| parent | vlan: Move vlan_set_encap_proto() to vlan header file (diff) | |
| download | linux-dev-75f2811c6460ccc59d83c66059943ce9c9f81a18.tar.xz linux-dev-75f2811c6460ccc59d83c66059943ce9c9f81a18.zip | |
ipv6: Add fragment reporting to ipv6_skip_exthdr().
While parsing through IPv6 extension headers, fragment headers are
skipped making them invisible to the caller. This reports the
fragment offset of the last header in order to make it possible to
determine whether the packet is fragmented and, if so whether it is
a first or last fragment.
Signed-off-by: Jesse Gross <jesse@nicira.com>
Diffstat (limited to 'net/netfilter/xt_AUDIT.c')
| -rw-r--r-- | net/netfilter/xt_AUDIT.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/net/netfilter/xt_AUDIT.c b/net/netfilter/xt_AUDIT.c index 4bca15a0c385..ba92824086f3 100644 --- a/net/netfilter/xt_AUDIT.c +++ b/net/netfilter/xt_AUDIT.c @@ -98,6 +98,7 @@ static void audit_ip6(struct audit_buffer *ab, struct sk_buff *skb) struct ipv6hdr _ip6h; const struct ipv6hdr *ih; u8 nexthdr; + __be16 frag_off; int offset; ih = skb_header_pointer(skb, skb_network_offset(skb), sizeof(_ip6h), &_ip6h); @@ -108,7 +109,7 @@ static void audit_ip6(struct audit_buffer *ab, struct sk_buff *skb) nexthdr = ih->nexthdr; offset = ipv6_skip_exthdr(skb, skb_network_offset(skb) + sizeof(_ip6h), - &nexthdr); + &nexthdr, &frag_off); audit_log_format(ab, " saddr=%pI6c daddr=%pI6c proto=%hhu", &ih->saddr, &ih->daddr, nexthdr); |