From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: [PATCH][IPTABLES] userspace u32 match support Date: Wed, 15 Nov 2006 10:35:45 +0100 Message-ID: <455ADF71.5010503@trash.net> References: <4553D66B.2010309@netfilter.org> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit Cc: Harald Welte , Michael Rash , Netfilter Development Mailinglist , Pablo Neira Ayuso Return-path: To: Krzysztof Oledzki In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Krzysztof Oledzki wrote: > On Fri, 10 Nov 2006, Pablo Neira Ayuso wrote: > >> Add support for u32 match in userspace > > > Thanks, but the original u32 match was much more powerful and allowed > for example to move to a next header (ip->tcp) using the @ operator and > generally to build more advanced test. As you used the same name (u32) > it will be no longer possible to use the old one. Yes, this is a problem. Without beeing able to get at the TCP header or data it is of much less use. > So, are there any plans to implement full power of the old u32 extension? I agree, we should integrate the original version.