From db84371beafd011e1f1cbe9688241c4dff1649f7 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Thu, 10 May 2018 23:25:27 +0200 Subject: xtables: translate nft meta trace set 1 to -j TRACE nft meta expr enables the nfnetlink based trace infrastruvture, so prefer to use that rather than xt_TRACE. Signed-off-by: Florian Westphal --- iptables/nft-shared.h | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'iptables/nft-shared.h') diff --git a/iptables/nft-shared.h b/iptables/nft-shared.h index 6d04b1a4..d74eeb00 100644 --- a/iptables/nft-shared.h +++ b/iptables/nft-shared.h @@ -43,6 +43,7 @@ enum { NFT_XT_CTX_PAYLOAD = (1 << 0), NFT_XT_CTX_META = (1 << 1), NFT_XT_CTX_BITWISE = (1 << 2), + NFT_XT_CTX_IMMEDIATE = (1 << 3), }; struct nft_xt_ctx { @@ -62,6 +63,10 @@ struct nft_xt_ctx { struct { uint32_t key; } meta; + struct { + uint32_t data[4]; + uint32_t len, reg; + } immediate; struct { uint32_t mask[4]; uint32_t xor[4]; -- cgit v1.2.3