From mboxrd@z Thu Jan 1 00:00:00 1970 From: Hans Schillstrom Subject: IPv6 defrag question ? Date: Thu, 8 Dec 2011 10:12:11 +0100 Message-ID: <201112081012.13065.hans.schillstrom@ericsson.com> References: <4ED763EA.50307@trash.net> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8BIT Cc: Hans Schillstrom , "pablo@netfilter.org" , "jengelh@medozas.de" , "netfilter-devel@vger.kernel.org" , "netdev@vger.kernel.org" To: Patrick McHardy Return-path: In-Reply-To: <4ED763EA.50307@trash.net> Content-Disposition: inline Sender: netdev-owner@vger.kernel.org List-Id: netfilter-devel.vger.kernel.org Hi While testing HMARK and IPv6 with nf_defrag_ipv6 (and nf_conntrack_ipv6 loaded) I can't see the defrag ? >>From what I can see nf_conntrack_reasm goes into PREROUTING with prio -400 and HMARK in PREROUTING with prio -150 I was expecting that the reasaembled packet whould reach HMARK not the fragments. (Debug print from hmark) HMARK() mark:489, hash:4d04eaa1, frag:1, nhoffs:30 plen:1408 (2008::10 - 1000::1) HMARK() mark:489, hash:4d04eaa1, frag:1, nhoffs:0 plen:86 (2008::10 - 1000::1) IPv4 do reassm. the packets not IPv6... -- Regards Hans Schillstrom