diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-07-05 10:26:15 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-07-09 09:55:43 +0200 |
commit | 7a847c00eeba9744353ecdfad253143b9115678a (patch) | |
tree | 334ddb11e408b95bc8f44e8daac2284abce96aa3 /net/netfilter/nf_tables_trace.c | |
parent | 0ed8f619b412b52360ccdfaf997223ccd9319569 (diff) | |
download | linux-7a847c00eeba9744353ecdfad253143b9115678a.tar.gz linux-7a847c00eeba9744353ecdfad253143b9115678a.tar.bz2 linux-7a847c00eeba9744353ecdfad253143b9115678a.zip |
netfilter: nf_log: incorrect offset to network header
NFPROTO_ARP is expecting to find the ARP header at the network offset.
In the particular case of ARP, HTYPE= field shows the initial bytes of
the ethernet header destination MAC address.
netdev out: IN= OUT=bridge0 MACSRC=c2:76:e5:71:e1:de MACDST=36:b0:4a:e2:72:ea MACPROTO=0806 ARP HTYPE=14000 PTYPE=0x4ae2 OPCODE=49782
NFPROTO_NETDEV egress hook is also expecting to find the IP headers at
the network offset.
Fixes: 35b9395104d5 ("netfilter: add generic ARP packet logger")
Reported-by: Tom Yan <tom.ty89@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nf_tables_trace.c')
0 files changed, 0 insertions, 0 deletions