From mboxrd@z Thu Jan 1 00:00:00 1970 From: Bart De Schuymer Subject: Re: br_netfilter post routing hook question... Date: Fri, 02 Apr 2010 19:50:57 +0200 Message-ID: <4BB62E81.707@pandora.be> References: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: Gareth Williams , netfilter-devel@vger.kernel.org To: agashi shipora Return-path: Received: from jacques.telenet-ops.be ([195.130.132.50]:45612 "EHLO jacques.telenet-ops.be" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755726Ab0DBRvA (ORCPT ); Fri, 2 Apr 2010 13:51:00 -0400 In-Reply-To: Sender: netfilter-devel-owner@vger.kernel.org List-ID: agashi shipora wrote: > Hi, > > I don't know if br_nf_post_routing can be assigned a priority > NF_BR_PRI_LAST-1. I couldn't find ip_refrag definition in 2.6.30. > The comment about ip_refrag() is outdated. I sent a patch containing an updated comment to Patrick earlier this week. The priority still has to be NF_BR_PRI_LAST, because br_nf_post_routing() returns NF_STOLEN. This is because the function ip_fragment(), which can be called by br_nf_dev_queue_xmit(), will free the skb. If you won't use connection tracking, I guess you could alter the code so you can still look at it after br_nf_post_routing(). cheers, Bart -- Bart De Schuymer www.artinalgorithms.be