diff options
| author | Phil Sutter <phil@nwl.cc> | 2026-09-08 12:02:54 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2026-09-27 23:39:21 +0200 |
| commit | 2ac41d7009c7c60e0b876760d98bd84a1f91020d (patch) | |
| tree | b3688c23ecdb0cb2956ed488706684e103573f78 /include/net | |
| parent | 96ed91f5773a4db499166d301cdfaba0b4907649 (diff) | |
netfilter: conntrack: Untangle drop and invalid counters
In nf_conntrack_in, 'drop' counter increments if
nf_conntrack_handle_packet returns NF_DROP. This is a special case with
TCP packets (added by commit 6b69fe0c73c0 ("netfilter: nf_conntrack_tcp:
fix endless loop") and not related to invalid packets which are
responsible for all the other <=0 returns. So don't increment 'invalid'
ounter in this case.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/net')
0 files changed, 0 insertions, 0 deletions