netdev - Re: [PATCH iproute2-next] ip xfrm: support printing XFRMA_SET_MARK

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Tue, 1 Sep 2020 19:55:05 -0600
From:   David Ahern <dsahern@...il.com>
To:     Antony Antony <antony@...nome.org>,
        Stephen Hemminger <stephen@...workplumber.org>
Cc:     netdev@...r.kernel.org
Subject: Re: [PATCH iproute2-next] ip xfrm: support printing
 XFRMA_SET_MARK_MASK attribute in states

On 8/28/20 8:59 AM, Antony Antony wrote:
> The XFRMA_SET_MARK_MASK attribute is set in states (4.19+).
> It is the mask of XFRMA_SET_MARK(a.k.a. XFRMA_OUTPUT_MARK in 4.18)
> 
> sample output: note the output-mark mask
> ip xfrm state
> 	src 192.1.2.23 dst 192.1.3.33
> 	proto esp spi 0xSPISPI reqid REQID mode tunnel
> 	replay-window 32 flag af-unspec
> 	output-mark 0x3/0xffffff
> 	aead rfc4106(gcm(aes)) 0xENCAUTHKEY 128
> 	if_id 0x1
> 
> Signed-off-by: Antony Antony <antony@...nome.org>
> ---
>  ip/ipxfrm.c | 4 ++++
>  1 file changed, 4 insertions(+)
> 

applied to iproute2-next. Thanks