ulogd2 branch, master, updated. ulogd-2.0.0beta4-1-gbaa8426

Pablo Neira netfilter-cvslog-bounces at lists.netfilter.org
Mon Sep 6 14:05:56 CEST 2010


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "ulogd2".

The branch, master has been updated
       via  baa8426db400f37bc62eb77e7d4ebf87b84b0a87 (commit)
      from  c8830681b465638e0d6698fe82773d025bb9396b (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit baa8426db400f37bc62eb77e7d4ebf87b84b0a87
Author: Jan Andres <jandres at gmx.net>
Date:   Mon Sep 6 12:47:46 2010 +0200

    pcap: fix packet length handling
    
    Currently, the PCAP output plugin uses ip.totlen to determine both the
    "len" and "caplen" pcap header fields, as well as the amount of packet
    data written to the file. There are two issues with this:
    
    - For obvious reasons it doesn't work for IPv6.
    
    - AFAICT, in case of an incompletely captured packet (--nflog-range)
      it will attempt to write out the whole packet, not just the part
      captured.
    
    This patch changes the behavior to:
    
    - Use raw.pktlen to set the "caplen" field, and the amount of data
      written.
    
    - Determine the "len" (original length) field from ip.totlen or
      ip6.payload_len if possible, default to the same value as "caplen"
      otherwise.
    
    Signed-off-by: Jan Andres <jandres at gmx.net>
    Signed-off-by: Pablo Neira Ayuso <pablo at netfilter.org>

-----------------------------------------------------------------------

Summary of changes:
 output/pcap/ulogd_output_PCAP.c |   24 +++++++++++++++++++++---
 1 files changed, 21 insertions(+), 3 deletions(-)


hooks/post-receive
-- 
ulogd2



More information about the netfilter-cvslog mailing list