diff options
author | Zhongqiu Duan <dzq.aishenghu0@gmail.com> | 2025-04-17 15:49:30 +0000 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2025-05-05 13:15:09 +0200 |
commit | bfe7cfb65c753952735c3eed703eba9a8b96a18d (patch) | |
tree | dbf58bf06a1aaffc99637e07c7ba131e12e78d64 /tools/perf/scripts/python/export-to-sqlite.py | |
parent | d33f889fd80c91e0250874e910fc58918eb660db (diff) |
netfilter: nft_quota: match correctly when the quota just depleted
The xt_quota compares skb length with remaining quota, but the nft_quota
compares it with consumed bytes.
The xt_quota can match consumed bytes up to quota at maximum. But the
nft_quota break match when consumed bytes equal to quota.
i.e., nft_quota match consumed bytes in [0, quota - 1], not [0, quota].
Fixes: 795595f68d6c ("netfilter: nft_quota: dump consumed quota")
Signed-off-by: Zhongqiu Duan <dzq.aishenghu0@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-sqlite.py')
0 files changed, 0 insertions, 0 deletions