Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 7d1e0459 authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso Committed by Patrick McHardy
Browse files

netfilter: nf_conntrack: account packets drop by tcp_packet() 



Since tcp_packet() may return -NF_DROP in two situations, the
packet-drop stats must be increased.

Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
parent 08361aa8

net/netfilter/nf_conntrack_core.c

+2 −0
Original line number Original line Diff line number Diff line
@@ -734,6 +734,8 @@ nf_conntrack_in(struct net *net, u_int8_t pf, unsigned int hooknum, 
		nf_conntrack_put(skb->nfct);

		nf_conntrack_put(skb->nfct);

		skb->nfct = NULL;

		skb->nfct = NULL;

		NF_CT_STAT_INC_ATOMIC(net, invalid);

		NF_CT_STAT_INC_ATOMIC(net, invalid);

		if (ret == -NF_DROP)

			NF_CT_STAT_INC_ATOMIC(net, drop);

		return -ret;

		return -ret;

	}

	}