[Bug 1704] Feature request - support missing and exists keywords for meta skuid

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Mon Oct 2 04:55:08 CEST 2023


https://bugzilla.netfilter.org/show_bug.cgi?id=1704

--- Comment #2 from thesashok724 at gmail.com ---
I want to match all packets that are sent by the kernel (that is, the packets
that do not have `meta skuid`/`meta skgid`). Currently, the only working
approach I've found is to match the opposite with vmap, like this:

```
meta skuid vmap {
    root: goto handle_root_packet,
    *: goto handle_user_packet,
}
goto handle_kernel_packet
```

I think it would be much more convenient to check the existence of these and
other fields with `missing`/`existing` or similar keywords, like this: `meta
skuid missing log`.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20231002/b79a2f16/attachment.html>


More information about the netfilter-buglog mailing list