Commit d660164d authored by Michal Kubeček's avatar Michal Kubeček Committed by Pablo Neira Ayuso

netfilter: xt_LOG: fix mark logging for IPv6 packets

In dump_ipv6_packet(), the "recurse" parameter is zero only if
dumping contents of a packet embedded into an ICMPv6 error
message. Therefore we want to log packet mark if recurse is
non-zero, not when it is zero.
Signed-off-by: default avatarMichal Kubecek <mkubecek@suse.cz>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent dc7b3eb9
...@@ -737,7 +737,7 @@ static void dump_ipv6_packet(struct sbuff *m, ...@@ -737,7 +737,7 @@ static void dump_ipv6_packet(struct sbuff *m,
dump_sk_uid_gid(m, skb->sk); dump_sk_uid_gid(m, skb->sk);
/* Max length: 16 "MARK=0xFFFFFFFF " */ /* Max length: 16 "MARK=0xFFFFFFFF " */
if (!recurse && skb->mark) if (recurse && skb->mark)
sb_add(m, "MARK=0x%x ", skb->mark); sb_add(m, "MARK=0x%x ", skb->mark);
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment