netdev - [PATCH/RFC net-next 0/2] net/sched: cls

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Thu,  2 Feb 2017 11:37:33 +0100
From:   Simon Horman <simon.horman@...ronome.com>
To:     David Miller <davem@...emloft.net>
Cc:     Dinan Gunawardena <dinan.gunawardena@...ronome.com>,
        netdev@...r.kernel.org, oss-drivers@...ronome.com,
        Simon Horman <simon.horman@...ronome.com>
Subject: [PATCH/RFC net-next 0/2] net/sched: cls_flower: Support matching on ND

Allow matching on Neighbour Discovery target IP, and source and
destination link-layer addresses for neighbour solicitation and
advertisement messages.

This is achieved by enhancing the flow dissector.

Sample usage:

tc qdisc add dev eth0 ingress

tc filter add dev eth0 protocol ipv6 parent ffff: flower \
	indev eth0 ip_proto icmpv6 type 136 code 0 \
	nd_target 2001:470:7eb3:403:201:8eff:fe22:8fea \
	nd_tll 00:01:8e:22:8f:ea action drop


Dependency:

This series depends on the following patch which is present in net
040587af3122 ("net/sched: cls_flower: Correct matching on ICMPv6 code")

Simon Horman (2):
  flow dissector: ND support
  net/sched: cls_flower: Support matching on ND

 include/net/flow_dissector.h | 14 ++++++++
 include/uapi/linux/pkt_cls.h |  7 ++++
 net/core/flow_dissector.c    | 83 +++++++++++++++++++++++++++++++++++++++++++-
 net/sched/cls_flower.c       | 42 +++++++++++++++++++++-
 4 files changed, 144 insertions(+), 2 deletions(-)

-- 
2.7.0.rc3.207.g0ac5344