Audit system development
 help / color / mirror / Atom feed
* [PATCH v6 0/2] audit: improve NETFILTER_PKT records
@ 2025-11-13 13:36 Ricardo Robaina
  0 siblings, 0 replies; only message in thread
From: Ricardo Robaina @ 2025-11-13 13:36 UTC (permalink / raw)
  To: audit, linux-kernel, netfilter-devel, coreteam
  Cc: paul, eparis, fw, pablo, kadlec, Ricardo Robaina

Currently, NETFILTER_PKT records lack source and destination
port information, which is often valuable for troubleshooting.
This patch series adds ports numbers, to NETFILTER_PKT records.

The first patch refactors netfilter-related code, by moving
duplicated code to audit.c, by creating audit_log_nf_skb()
helper function.
The second one, improves the NETFILTER_PKT records, by 
including source and destination ports for protocols of
interest.

Ricardo Robaina (2):
  audit: add audit_log_nf_skb helper function
  audit: include source and destination ports to NETFILTER_PKT

 include/linux/audit.h    |   8 ++
 kernel/audit.c           | 159 +++++++++++++++++++++++++++++++++++++++
 net/netfilter/nft_log.c  |  57 +-------------
 net/netfilter/xt_AUDIT.c |  57 +-------------
 4 files changed, 169 insertions(+), 112 deletions(-)

-- 
2.51.1


^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2025-11-13 13:37 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-11-13 13:36 [PATCH v6 0/2] audit: improve NETFILTER_PKT records Ricardo Robaina

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox