netfilter: nft_meta: add pkttype support
authorAna Rey <anarey@gmail.com>
Wed, 6 Aug 2014 11:52:49 +0000 (13:52 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 24 Aug 2014 12:06:39 +0000 (14:06 +0200)
commite2a093ff0dbfa4c5d99f25241cf33325e9691d91
treefc8538f532be4897462c3a0c77618c97356e7fac
parente91ded8db57472c20b59b2242b100764cc152a10
netfilter: nft_meta: add pkttype support

Add pkttype support for ip, ipv6 and inet families of tables.

This allows you to fetch the meta packet type based on the link layer
information. The loopback traffic is a special case, the packet type
is guessed from the network layer header.

No special handling for bridge and arp since we're not going to see
such traffic in the loopback interface.

Joint work with Alvaro Neira Ayuso <alvaroneay@gmail.com>

Signed-off-by: Alvaro Neira Ayuso <alvaroneay@gmail.com>
Signed-off-by: Ana Rey <anarey@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h
net/netfilter/nft_meta.c