diff options
author | 2025-04-17 15:49:30 +0000 | |
---|---|---|
committer | 2025-05-05 13:15:09 +0200 | |
commit | bfe7cfb65c753952735c3eed703eba9a8b96a18d (patch) | |
tree | dbf58bf06a1aaffc99637e07c7ba131e12e78d64 /tools/perf/scripts/python/export-to-postgresql.py | |
parent | selftests: netfilter: add conntrack stress test (diff) | |
download | wireguard-linux-bfe7cfb65c753952735c3eed703eba9a8b96a18d.tar.xz wireguard-linux-bfe7cfb65c753952735c3eed703eba9a8b96a18d.zip |
netfilter: nft_quota: match correctly when the quota just depleted
The xt_quota compares skb length with remaining quota, but the nft_quota
compares it with consumed bytes.
The xt_quota can match consumed bytes up to quota at maximum. But the
nft_quota break match when consumed bytes equal to quota.
i.e., nft_quota match consumed bytes in [0, quota - 1], not [0, quota].
Fixes: 795595f68d6c ("netfilter: nft_quota: dump consumed quota")
Signed-off-by: Zhongqiu Duan <dzq.aishenghu0@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions