diff options
| author | Florian Westphal <fw@strlen.de> | 2024-07-04 13:29:20 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2024-07-08 11:35:31 +0100 |
| commit | 3abbd7ed8b768ff37798e81910b47c2e05156d49 (patch) | |
| tree | 611e82a08c49ec32190d97640ec44fe199853067 /drivers/net/dsa/microchip | |
| parent | 2f5e6395714d0ee53c150da38b25975fe37755c2 (diff) | |
| download | lwn-3abbd7ed8b768ff37798e81910b47c2e05156d49.tar.gz lwn-3abbd7ed8b768ff37798e81910b47c2e05156d49.zip | |
act_ct: prepare for stolen verdict coming from conntrack and nat engine
At this time, conntrack either returns NF_ACCEPT or NF_DROP.
To improve debuging it would be nice to be able to replace NF_DROP verdict
with NF_DROP_REASON() helper,
This helper releases the skb instantly (so drop_monitor can pinpoint
exact location) and returns NF_STOLEN.
Prepare call sites to deal with this before introducing such changes
in conntrack and nat core.
Signed-off-by: Florian Westphal <fw@strlen.de>
Reviewed-by: Simon Horman <horms@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net/dsa/microchip')
0 files changed, 0 insertions, 0 deletions