Re: ulogd: logging IPv6 flows

--C1tGMC3L6Po9/vnt
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2026-04-01, at 13:55:09 +0200, Martin Mare=C5=A1 wrote:
> I am trying to use ulogd2 to log all flows from conntrack, but I am
> getting corrupted entries for IPv6 connections.
>=20
> Instead of IPv6 addresses of endpoints, I am getting IPv4 addresses.
> Apparently, the bytes in memory are interpreted as IPv4: for an IPv6
> address starting with 2001:0718:, I see 32.1.7.24.
>=20
> A quick glance at input/flow/ulogd_inpflow_NFCT.c suggests that both
> IPv4 and IPv6 source addresses are stored under the NFCT_ORIG_IP_SADDR
> key, but the nfct_okeys array has a fixed ULOGD_RET_IPADDR type for
> it.

The use of `ULOGD_RET_IPADDR` for both families is (or should be) fine.
My guess is that there is a filter which expects `ULOGD_RET_IPADDR`
fields always to be IPv4.  I thought I had fixed all of those.  I will
investigate.  Can you tell me the whole stack?

J.


--C1tGMC3L6Po9/vnt
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=ZpSe
-----END PGP SIGNATURE-----

--C1tGMC3L6Po9/vnt--