[Bug 1775] RAW PAYLOAD EXPRESSION offset is limited to 2048
bugzilla-daemon at netfilter.org
bugzilla-daemon at netfilter.org
Thu Sep 26 12:38:44 CEST 2024
https://bugzilla.netfilter.org/show_bug.cgi?id=1775
Phil Sutter <phil at nwl.cc> changed:
What |Removed |Added
----------------------------------------------------------------------------
Severity|critical |enhancement
CC| |phil at nwl.cc
Component|nft |kernel
Version|1.0.x |unspecified
--- Comment #1 from Phil Sutter <phil at nwl.cc> ---
Yes, this is a limitation of payload expression in kernel. Max offset and
length are 255 bytes, limited by struct nft_payload field sizes. It is like
this since day 1, I suppose the rationale was that headers usually fit into the
first 256 bytes of a packet. What's your use-case?
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20240926/c9718485/attachment.html>
More information about the netfilter-buglog
mailing list