Vishwanath Pai 7643507fe8 netfilter: xt_NFLOG: nflog-range does not truncate packets ... li->u.ulog.copy_len is currently ignored by the kernel, we should truncate the packet to either li->u.ulog.copy_len (if set) or copy_range before sending it to userspace. 0 is a valid input for copy_len, so add a new flag to indicate whether this was option was specified by the user or not. Add two flags to indicate whether nflog-size/copy_len was set or not. XT_NFLOG_F_COPY_LEN is for XT_NFLOG and NFLOG_F_COPY_LEN for nfnetlink_log On the userspace side, this was initially represented by the option nflog-range, this will be replaced by --nflog-size now. --nflog-range would still exist but does not do anything. Reported-by: Joe Dollard <jdollard@akamai.com> Reviewed-by: Josh Hunt <johunt@akamai.com> Signed-off-by: Vishwanath Pai <vpai@akamai.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2016-06-24 11:03:23 +02:00
..
ipv4	ipv4: Push struct net down into nf_send_reset	2015-09-29 20:21:31 +02:00
ipv6	netfilter: ipv6: avoid nf_iterate recursion	2015-11-23 17:54:45 +01:00
br_netfilter.h	bridge: Pass net into br_validate_ipv4 and br_validate_ipv6	2015-09-29 20:21:32 +02:00
nf_conntrack.h	netfilter: move zone info into struct nf_conn	2016-06-23 13:33:12 +02:00
nf_conntrack_acct.h	netfilter: introduce nf_conn_acct structure	2013-11-03 21:48:49 +01:00
nf_conntrack_core.h	netfilter: conntrack: use a single hashtable for all namespaces	2016-05-05 16:39:47 +02:00
nf_conntrack_ecache.h	netfilter: conntrack: move expectation event helper to ecache.c	2016-04-12 23:01:57 +02:00
nf_conntrack_expect.h	netfilter: conntrack: use a single expectation table for all namespaces	2016-05-06 11:50:01 +02:00
nf_conntrack_extend.h	netfilter: move zone info into struct nf_conn	2016-06-23 13:33:12 +02:00
nf_conntrack_helper.h	netfilter: Remove extern from function prototypes	2013-09-23 16:29:42 -04:00
nf_conntrack_l3proto.h	netfilter: Convert print_tuple functions to return void	2014-11-05 14:10:33 -05:00
nf_conntrack_l4proto.h	netfilter: conntrack: introduce clash resolution on insertion race	2016-05-05 16:39:50 +02:00
nf_conntrack_labels.h	netfilter: connlabels: change nf_connlabels_get bit arg to 'highest used'	2016-04-18 20:39:48 +02:00
nf_conntrack_seqadj.h	netfilter: Remove extern from function prototypes	2013-09-23 16:29:42 -04:00
nf_conntrack_synproxy.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2013-10-01 17:06:14 -04:00
nf_conntrack_timeout.h	netfilter: cttimeout: add netns support	2015-12-14 12:48:58 +01:00
nf_conntrack_timestamp.h	netfilter: Remove extern from function prototypes	2013-09-23 16:29:42 -04:00
nf_conntrack_tuple.h	netfilter: nf_nat: export NAT definitions to userspace	2011-12-23 14:36:43 +01:00
nf_conntrack_zones.h	netfilter: move zone info into struct nf_conn	2016-06-23 13:33:12 +02:00
nf_dup_netdev.h	netfilter: nf_tables: add packet duplication to the netdev family	2016-01-03 21:04:23 +01:00
nf_log.h	netfilter: xt_NFLOG: nflog-range does not truncate packets	2016-06-24 11:03:23 +02:00
nf_nat.h	netfilter: fix compilation of masquerading without IP_NF_TARGET_MASQUERADE	2014-09-11 17:02:45 +02:00
nf_nat_core.h	netfilter: Pass net into nf_xfrm_me_harder	2015-09-18 22:00:22 +02:00
nf_nat_helper.h	netfilter: Remove extern from function prototypes	2013-09-23 16:29:42 -04:00
nf_nat_l3proto.h	netfilter: Pass priv instead of nf_hook_ops to netfilter hooks	2015-09-18 22:00:16 +02:00
nf_nat_l4proto.h	netfilter: Remove extern from function prototypes	2013-09-23 16:29:42 -04:00
nf_nat_redirect.h	netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one module	2014-11-27 13:08:42 +01:00
nf_queue.h	netfilter: make nf_queue_entry_get_refs return void	2015-10-16 18:22:23 +02:00
nf_tables.h	netfilter: nf_tables: allow set names up to 32 bytes	2016-05-05 16:39:51 +02:00
nf_tables_bridge.h	netfilter: nf_tables_bridge: export nft_reject_ip*hdr_validate functions	2014-11-27 12:58:05 +01:00
nf_tables_core.h	netfilter: nf_tables: wrap tracing with a static key	2015-12-09 13:23:13 +01:00
nf_tables_ipv4.h	netfilter: nf_tables: kill nft_pktinfo.ops	2015-09-18 21:58:01 +02:00
nf_tables_ipv6.h	netfilter: nf_tables: kill nft_pktinfo.ops	2015-09-18 21:58:01 +02:00
nfnetlink_log.h	netfilter: log: netns NULL ptr bug when calling from conntrack	2013-05-15 14:11:07 +02:00
nft_dup.h	netfilter: nf_tables: add nft_dup expression	2015-08-07 11:49:49 +02:00
nft_masq.h	netfilter: nft_masq: support port range	2016-03-02 20:05:27 +01:00
nft_meta.h	netfilter: nf_tables: wrap tracing with a static key	2015-12-09 13:23:13 +01:00
nft_redir.h	netfilter: nf_tables: add new expression nft_redir	2014-10-27 22:49:39 +01:00
nft_reject.h	netfilter: nft_reject: introduce icmp code abstraction for inet and bridge	2014-10-02 18:29:57 +02:00
xt_rateest.h	netfilter: Remove extern from function prototypes	2013-09-23 16:29:42 -04:00