On 05/15/2006 05:06 PM, Patrick McHardy wrote: > Right, I somehow though the prefix was also configured using netlink, > which is of course wrong. In that case I think nfnetlink_log should > just 0-terminate the string. BTW, Is there any reason why the prefix > is truncated to NFULNL_PREFIXLEN? It makes calculating the size to allocate simpler, but otherwise it looks like a carryover from when log messages were passed via fixed size structures. Giving the full prefix is desirable I think, especially for log messages generated internally by netfilter. eg the sequence number check in ip_conntrack_proto_tcp.c Here's a patch against 2.6.16, tested with ulogd.