From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mike-Ro-Chanel Subject: Re: Adding packet metadata Date: Wed, 24 Mar 2004 09:18:52 +0100 Sender: netfilter-devel-admin@lists.netfilter.org Message-ID: <4061446C.7050502@yahoo.it> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Cc: Scott MacKay , Netfilter Developers List Return-path: To: Henrik Nordstrom In-Reply-To: Errors-To: netfilter-devel-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Unsubscribe: , List-Archive: List-Id: netfilter-devel.vger.kernel.org Henrik Nordstrom wrote: > On Wed, 24 Mar 2004, Mike-Ro-Chanel wrote: > > >>An interesting question about MARK field in SKB structure is: Can I use >>all 32-bit of "nfmark" for adding metadata? > > > Yes. > > >>Iptables front-end (from command line) seems to take mark value as a >>8-bit number. > > > What makes you think so? Now I understand, it is my error on iptables usage. > There is a slight signed bug in the string_to_number function which > prevents the use of the 2^31 bit, easily fixed by changing it to use > unsigned. > Ok, thanks for the tip! Mike-Ro-Chanel