From mboxrd@z Thu Jan 1 00:00:00 1970 From: Amin Azez Subject: Re: ipt_ulog.h versus ebt_ulog.h Date: Wed, 19 Oct 2005 10:41:58 +0100 Message-ID: <435614E6.1080200@ufomechanic.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Return-path: To: netfilter-devel@lists.netfilter.org In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org This becomes more important when I see that ebt_ulog and upt_ULOG modules can't both be loaded into the kernel at the same time, and it must be confusing for ULOG clients to have different structs passed through depending whether ebtables or iptables sent the message. Sam Amin Azez wrote: > Is there a strong reason why ebt_ulog.h log structure has > > char physindev[IFNAMSIZ]; > char physoutdev[IFNAMSIZ]; > > and ipt_ulog.h structure does not support physdev? > > Also interesting that ebt_ulog has > struct timeval stamp; > > but ipt_ulog has > long timestamp_sec; > long timestamp_usec; > > > I'd like to supply a patch to address these issues for kernel space and > user-space ulog tools, but I am soliciting feedback first. > > I think the first addition is more important than the second change. > > As a general principle although ebt_* /ipt_* network layer associations > exist, these exist for matching criteria and it seems a bit strong to > assume that just because the selection critera for the -J ULOG target > was impemented in ipt_* or ebt_* that the ULOG reader is not interested > in the entire frame. I mean this only to justify the change. I do also > realise the ulog is to some degree now depracated. > > Sam > > >