netfilter: nfnetlink_log: add support for VLAN information
Currently, there is no vlan information (e.g. when used with a vlan aware
bridge) passed to userspache, HWHEADER will contain an 08 00 (ip) suffix
even for tagged ip packets.
Therefore, add an extra netlink attribute that passes the vlan information
to userspace similarly to 15824ab29f
for nfqueue.
Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:

committed by
Pablo Neira Ayuso

parent
63d10e12b0
commit
65af4a1074
@@ -33,6 +33,15 @@ struct nfulnl_msg_packet_timestamp {
|
||||
__aligned_be64 usec;
|
||||
};
|
||||
|
||||
enum nfulnl_vlan_attr {
|
||||
NFULA_VLAN_UNSPEC,
|
||||
NFULA_VLAN_PROTO, /* __be16 skb vlan_proto */
|
||||
NFULA_VLAN_TCI, /* __be16 skb htons(vlan_tci) */
|
||||
__NFULA_VLAN_MAX,
|
||||
};
|
||||
|
||||
#define NFULA_VLAN_MAX (__NFULA_VLAN_MAX + 1)
|
||||
|
||||
enum nfulnl_attr_type {
|
||||
NFULA_UNSPEC,
|
||||
NFULA_PACKET_HDR,
|
||||
@@ -54,6 +63,8 @@ enum nfulnl_attr_type {
|
||||
NFULA_HWLEN, /* hardware header length */
|
||||
NFULA_CT, /* nf_conntrack_netlink.h */
|
||||
NFULA_CT_INFO, /* enum ip_conntrack_info */
|
||||
NFULA_VLAN, /* nested attribute: packet vlan info */
|
||||
NFULA_L2HDR, /* full L2 header */
|
||||
|
||||
__NFULA_MAX
|
||||
};
|
||||
|
Reference in New Issue
Block a user