Pablo Neira Ayuso <pa...@netfilter.org> wrote: > I suspect you're missing some code in the evaluation phase? > > So you get left->len 1 and right->len 4?
Yes, meta template sets len of 1, where as RHS is 8 bit. This can be fixed up during delinearization, in this case we can know that kernel actually stores 1 byte. The 'template says its 1 bit' is only to force an error when someone asks to match 'socket transparent 3'. I asked Mate to send this patch to help with future debugging, so one can see what the mismatching values are. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
