Currently, NETFILTER_PKT records lack source and destination port information, which is often valuable for troubleshooting. This patch series adds ports numbers, to NETFILTER_PKT records.
The first patch refactors netfilter-related code, by moving duplicated code to audit.c, by creating audit_log_nf_skb() helper function. The second one, improves the NETFILTER_PKT records, by including source and destination ports for protocols of interest. Ricardo Robaina (2): audit: add audit_log_nf_skb helper function audit: include source and destination ports to NETFILTER_PKT include/linux/audit.h | 8 ++ kernel/audit.c | 159 +++++++++++++++++++++++++++++++++++++++ net/netfilter/nft_log.c | 58 +------------- net/netfilter/xt_AUDIT.c | 58 +------------- 4 files changed, 169 insertions(+), 114 deletions(-) -- 2.51.1
