Skip to content
GitLab
Projects
Groups
Snippets
Help
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Open sidebar
Kirill Smelkov
linux
Commits
3e0a552d
Commit
3e0a552d
authored
21 years ago
by
Patrick McHardy
Committed by
David S. Miller
21 years ago
Browse files
Options
Download
Email Patches
Plain Diff
[NETFILTER]: Fix logging of AH spis
parent
7a05c808
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
25 additions
and
12 deletions
+25
-12
net/ipv4/netfilter/ipt_LOG.c
net/ipv4/netfilter/ipt_LOG.c
+25
-12
No files found.
net/ipv4/netfilter/ipt_LOG.c
View file @
3e0a552d
...
...
@@ -2,16 +2,15 @@
* This is a module which is used for logging packets.
*/
#include <linux/module.h>
#include <linux/spinlock.h>
#include <linux/skbuff.h>
#include <linux/ip.h>
#include <linux/spinlock.h>
#include <net/icmp.h>
#include <net/udp.h>
#include <net/tcp.h>
#include <linux/netfilter_ipv4/ip_tables.h>
struct
in_device
;
#include <net/route.h>
#include <linux/netfilter_ipv4/ip_tables.h>
#include <linux/netfilter_ipv4/ipt_LOG.h>
#if 0
...
...
@@ -20,10 +19,6 @@ struct in_device;
#define DEBUGP(format, args...)
#endif
struct
esphdr
{
__u32
spi
;
};
/* FIXME evil kludge */
/* Use lock to serialize, so printks don't overlap */
static
spinlock_t
log_lock
=
SPIN_LOCK_UNLOCKED
;
...
...
@@ -256,13 +251,31 @@ static void dump_packet(const struct ipt_log_info *info,
break
;
}
/* Max Length */
case
IPPROTO_AH
:
case
IPPROTO_AH
:
{
struct
ip_auth_hdr
ah
;
if
(
ntohs
(
iph
.
frag_off
)
&
IP_OFFSET
)
break
;
/* Max length: 9 "PROTO=AH " */
printk
(
"PROTO=AH "
);
/* Max length: 25 "INCOMPLETE [65535 bytes] " */
if
(
skb_copy_bits
(
skb
,
iphoff
+
iph
.
ihl
*
4
,
&
ah
,
sizeof
(
ah
))
<
0
)
{
printk
(
"INCOMPLETE [%u bytes] "
,
skb
->
len
-
iphoff
-
iph
.
ihl
*
4
);
break
;
}
/* Length: 15 "SPI=0xF1234567 " */
printk
(
"SPI=0x%x "
,
ntohl
(
ah
.
spi
));
break
;
}
case
IPPROTO_ESP
:
{
struct
esphdr
esph
;
int
esp
=
(
iph
.
protocol
==
IPPROTO_ESP
);
struct
ip_esp_hdr
esph
;
/* Max length: 10 "PROTO=ESP " */
printk
(
"PROTO=
%s "
,
esp
?
"ESP"
:
"AH
"
);
printk
(
"PROTO=
ESP
"
);
if
(
ntohs
(
iph
.
frag_off
)
&
IP_OFFSET
)
break
;
...
...
This diff is collapsed.
Click to expand it.
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment