netfilter: nf_log: missing vlan offload tag and proto
Dump vlan tag and proto for the usual vlan offload case if the NF_LOG_MACDECODE flag is set on. Without this information the logging is misleading as there is no reference to the VLAN header. [12716.993704] test: IN=veth0 OUT= MACSRC=86:6c:92:ea:d6:73 MACDST=0e:3b:eb:86:73:76 VPROTO=8100 VID=10 MACPROTO=0800 SRC=192.168.10.2 DST=172.217.168.163 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=2548 DF PROTO=TCP SPT=55848 DPT=80 WINDOW=501 RES=0x00 ACK FIN URGP=0 [12721.157643] test: IN=veth0 OUT= MACSRC=86:6c:92:ea:d6:73 MACDST=0e:3b:eb:86:73:76 VPROTO=8100 VID=10 MACPROTO=0806 ARP HTYPE=1 PTYPE=0x0800 OPCODE=2 MACSRC=86:6c:92:ea:d6:73 IPSRC=192.168.10.2 MACDST=0e:3b:eb:86:73:76 IPDST=192.168.10.1 Fixes: 83e96d44 ("netfilter: log: split family specific code to nf_log_{ip,ip6,common}.c files") Signed-off-by:Pablo Neira Ayuso <pablo@netfilter.org>
Showing
- include/net/netfilter/nf_log.h 1 addition, 0 deletionsinclude/net/netfilter/nf_log.h
- net/ipv4/netfilter/nf_log_arp.c 17 additions, 2 deletionsnet/ipv4/netfilter/nf_log_arp.c
- net/ipv4/netfilter/nf_log_ipv4.c 4 additions, 2 deletionsnet/ipv4/netfilter/nf_log_ipv4.c
- net/ipv6/netfilter/nf_log_ipv6.c 5 additions, 3 deletionsnet/ipv6/netfilter/nf_log_ipv6.c
- net/netfilter/nf_log_common.c 12 additions, 0 deletionsnet/netfilter/nf_log_common.c
Loading
Please register or sign in to comment