commit 79d114d72e73c5c9696a832f03973fb16a2e7585
author Steffen Klassert <steffen.klassert@secunet.com> Wed Jun 07 13:17:16 2017 +0200
committer Steffen Klassert <steffen.klassert@secunet.com> Mon Oct 23 10:05:35 2017 +0200
tree 9778b96a089ac8c0b3325bd1b9bab98a767398b0
parent 7b8e21f49795e396bd891940e18d47ea2c19dba1

flow_dissector: Add the IPsec protocols to offset calculation

This avoids a pskb_expand_head for each IPsec packet.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

net/core/flow_dissector.c

diff --git a/net/core/flow_dissector.c b/net/core/flow_dissector.c
index 1f5caaf..7da6789 100644
--- a/net/core/flow_dissector.c
+++ b/net/core/flow_dissector.c
@@ -1244,6 +1244,15 @@ u32 __skb_get_poff(const struct sk_buff *skb, void *data,
 	case IPPROTO_SCTP:
 		poff += sizeof(struct sctphdr);
 		break;
+	case IPPROTO_ESP:
+		poff += sizeof(struct ip_esp_hdr);
+		break;
+	case IPPROTO_AH:
+		poff += sizeof(struct ip_auth_hdr);
+		break;
+	case IPPROTO_COMP:
+		poff += sizeof(struct ip_comp_hdr);
+		break;
 	}
 
 	return poff;