netfilter: ctnetlink: fix timestamp support for new conntracks
Subsystems (2)
Pablo Neira Ayuso
maintainerPATCH 1/1 netfilter: ctnetlink: fix timestamp support for new conntracks
This patch fixes the missing initialization of the start time if the timestamp support is enabled.
libnetfilter_conntrack/utils# conntrack -E &
libnetfilter_conntrack/utils# ./conntrack_create
tcp 6 109 ESTABLISHED src=1.1.1.1 dst=2.2.2.2 sport=1025 dport=21 packets=0 bytes=0 [UNREPLIED] src=2.2.2.2 dst=1.1.1.1 sport=21 dport=1025 packets=0 bytes=0 mark=0 delta-time=1303296401 use=2
--- net/netfilter/nf_conntrack_netlink.c | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-)
net/netfilter/nf_conntrack_netlink.c +4 -0
@@ -1334,6 +1334,7 @@ ctnetlink_create_conntrack(struct net *net, u16 zone,struct nf_conn *ct;int err = -EINVAL ;struct nf_conntrack_helper *helper; +struct nf_conn_tstamp *tstamp; ct =nf_conntrack_alloc (net, zone, otuple, rtuple,GFP_ATOMIC );if (IS_ERR (ct))
@@ -1451,6 +1452,9 @@ ctnetlink_create_conntrack(struct net *net, u16 zone,__set_bit (IPS_EXPECTED_BIT , &ct->status); ct->master = master_ct; } + tstamp =nf_conn_tstamp_find (ct); +if (tstamp) + tstamp->start =ktime_to_ns (ktime_get_real ());add_timer (&ct->timeout);nf_conntrack_hash_insert (ct);
Patrick McHardy
AppliedQuoted 7 lines · Pablo Neira Ayuso
This patch fixes the missing initialization of the start time if the timestamp support is enabled.
libnetfilter_conntrack/utils# conntrack -E &
libnetfilter_conntrack/utils# ./conntrack_create
tcp 6 109 ESTABLISHED src=1.1.1.1 dst=2.2.2.2 sport=1025 dport=21 packets=0 bytes=0 [UNREPLIED] src=2.2.2.2 dst=1.1.1.1 sport=21 dport=1025 packets=0 bytes=0 mark=0 delta-time=1303296401 use=2
Applied, thanks Pablo.