Re: [PATCH v5 0/2] audit: improve NETFILTER_PKT records

From: Florian Westphal

Date: Thu Nov 06 2025 - 18:21:18 EST


Ricardo Robaina <rrobaina@xxxxxxxxxx> wrote:
> Currently, NETFILTER_PKT records lack source and destination
> port information, which is often valuable for troubleshooting.
> This patch series adds ports numbers, to NETFILTER_PKT records.
>
> The first patch refactors netfilter-related code, by moving
> duplicated code to audit.c, creating two helper functions:
> 'audit_log_packet_ip4' and 'audit_log_packet_ip6'.
> The second one, improves the NETFILTER_PKT records, by
> including source and destination ports for protocols of
> interest.

I'll assume this will go via audit tree, so:

Acked-by: Florian Westphal <fw@xxxxxxxxx>