Skip to content

Commit

Permalink
netfilter: xt_LOG: fix mark logging for IPv6 packets
Browse files Browse the repository at this point in the history
In dump_ipv6_packet(), the "recurse" parameter is zero only if
dumping contents of a packet embedded into an ICMPv6 error
message. Therefore we want to log packet mark if recurse is
non-zero, not when it is zero.

Signed-off-by: Michal Kubecek <mkubecek@suse.cz>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
  • Loading branch information
Michal Kubeček authored and Pablo Neira Ayuso committed May 29, 2013
1 parent dc7b3eb commit d660164
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion net/netfilter/xt_LOG.c
Original file line number Diff line number Diff line change
Expand Up @@ -737,7 +737,7 @@ static void dump_ipv6_packet(struct sbuff *m,
dump_sk_uid_gid(m, skb->sk);

/* Max length: 16 "MARK=0xFFFFFFFF " */
if (!recurse && skb->mark)
if (recurse && skb->mark)
sb_add(m, "MARK=0x%x ", skb->mark);
}

Expand Down

0 comments on commit d660164

Please sign in to comment.