Allow matching on Neighbour Discovery target IP, and source and
destination link-layer addresses for neighbour solicitation and
advertisement messages.
This is achieved by enhancing the flow dissector.
Sample usage:
tc qdisc add dev eth0 ingress
tc filter add dev eth0 protocol ipv6 parent ffff: flower \
indev eth0 ip_proto icmpv6 type 136 code 0 \
nd_target 2001:470:7eb3:403:201:8eff:fe22:8fea \
nd_tll 00:01:8e:22:8f:ea action drop
Dependency:
This series depends on the following patch which is present in net
040587af3122 ("net/sched: cls_flower: Correct matching on ICMPv6 code")
Simon Horman (2):
flow dissector: ND support
net/sched: cls_flower: Support matching on ND
include/net/flow_dissector.h | 14 ++++++++
include/uapi/linux/pkt_cls.h | 7 ++++
net/core/flow_dissector.c | 83 +++++++++++++++++++++++++++++++++++++++++++-
net/sched/cls_flower.c | 42 +++++++++++++++++++++-
4 files changed, 144 insertions(+), 2 deletions(-)
--
2.7.0.rc3.207.g0ac5344
