You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Patrick McHardy 124dff01af netfilter: don't reset nf_trace in nf_reset() ... Commit 130549fe ("netfilter: reset nf_trace in nf_reset") added code to reset nf_trace in nf_reset(). This is wrong and unnecessary. nf_reset() is used in the following cases: - when passing packets up the the socket layer, at which point we want to release all netfilter references that might keep modules pinned while the packet is queued. nf_trace doesn't matter anymore at this point. - when encapsulating or decapsulating IPsec packets. We want to continue tracing these packets after IPsec processing. - when passing packets through virtual network devices. Only devices on that encapsulate in IPv4/v6 matter since otherwise nf_trace is not used anymore. Its not entirely clear whether those packets should be traced after that, however we've always done that. - when passing packets through virtual network devices that make the packet cross network namespace boundaries. This is the only cases where we clearly want to reset nf_trace and is also what the original patch intended to fix. Add a new function nf_reset_trace() and use it in dev_forward_skb() to fix this properly. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>		12 years ago
..
Makefile	net: move procfs code to net/core/net-procfs.c	12 years ago
datagram.c	net: fix infinite loop in __skb_recv_datagram()	12 years ago
dev.c	netfilter: don't reset nf_trace in nf_reset()	12 years ago
dev_addr_lists.c	net: count hw_addr syncs so that unsync works properly.	12 years ago
dev_ioctl.c	net: move ioctl functions into a separated file	12 years ago
drop_monitor.c	…
dst.c	ipv6: fix race condition regarding dst->expires and dst->from.	12 years ago
ethtool.c	v4 GRE: Add TCP segmentation offload for GRE	12 years ago
fib_rules.c	net: Enable a userns root rtnl calls that are safe for unprivilged users	12 years ago
filter.c	sk-filter: Add ability to lock a socket filter program	12 years ago
flow.c	net: fix the use of this_cpu_ptr	12 years ago
flow_dissector.c	flow_keys: include thoff into flow_keys for later usage	12 years ago
gen_estimator.c	…
gen_stats.c	…
iovec.c	…
link_watch.c	…
neighbour.c	net neigh: Optimize neighbor entry size calculation.	12 years ago
net-procfs.c	hlist: drop the node parameter from iterators	12 years ago
net-sysfs.c	net/core: apply pm_runtime_set_memalloc_noio on network devices	12 years ago
net-sysfs.h	…
net-traces.c	…
net_namespace.c	new helper: file_inode(file)	12 years ago
netevent.c	…
netpoll.c	netpoll: fix smatch warnings in netpoll core code	12 years ago
netprio_cgroup.c	net: core: Remove unnecessary alloc/OOM messages	12 years ago
pktgen.c	net: proc: change proc_net_remove to remove_proc_entry	12 years ago
request_sock.c	tcp: fix a panic on UP machines in reqsk_fastopen_remove	12 years ago
rtnetlink.c	rtnetlink: fix error return code in rtnl_link_fill()	12 years ago
scm.c	scm: Require CAP_SYS_ADMIN over the current pidns to spoof pids.	12 years ago
secure_seq.c	…
skbuff.c	net: fix a wrong assignment in skb_split()	12 years ago
sock.c	sock: only define socket limit if mem cgroup configured	12 years ago
sock_diag.c	sock_diag: Simplify sock_diag_handlers[] handling in __sock_diag_rcv_msg	12 years ago
stream.c	…
sysctl_net_core.c	net: avoid to hang up on sending due to sysctl configuration overflow.	12 years ago
timestamping.c	…
user_dma.c	…
utils.c	…