Re: [PATCH v5 0/2] audit: improve NETFILTER_PKT records

Florian Westphal
2025-11-06T23:21:18Z

Ricardo Robaina <rrobaina@redhat.com> wrote:
> Currently, NETFILTER_PKT records lack source and destination
> port information, which is often valuable for troubleshooting.
> This patch series adds ports numbers, to NETFILTER_PKT records.
>
> The first patch refactors netfilter-related code, by moving
> duplicated code to audit.c, creating two helper functions:
> 'audit_log_packet_ip4' and 'audit_log_packet_ip6'.
> The second one, improves the NETFILTER_PKT records, by
> including source and destination ports for protocols of
> interest.

I'll assume this will go via audit tree, so:

Acked-by: Florian Westphal <fw@strlen.de>