commit 3e40282fd93553da276b48830db3df819b73c884
author Jingjing Duan <Jingjing.Duan@sun.com> Wed Aug 13 19:06:16 2008 +0100
committer Paul Jakma <paul@quagga.net> Fri Aug 22 19:52:57 2008 +0100
tree ec89de00c1e111d1c7e2672829857f3bf6356fbc
parent efda3bb8e548fee84928ff23329c11de8e742ecd

[isisd] Fix packet filtering with DLPI

2008-08-13 Jingjing Duan <Jingjing.Duan@sun.com>

	* isisd/isis_dlpi.c: Change ioctl from PFIOCSETF (transparent mode)
	  to I_STR (non-transparent mode). The old code resulted in no
	  filtering at all.

Signed-off-by: Paul Jakma <paul@quagga.net>

isisd/isis_dlpi.c

diff --git a/isisd/isis_dlpi.c b/isisd/isis_dlpi.c
index db4383b..e61dd16 100644
--- a/isisd/isis_dlpi.c
+++ b/isisd/isis_dlpi.c
@@ -42,8 +42,6 @@
 #include "isisd/isis_circuit.h"
 #include "isisd/isis_flags.h"
 #include "isisd/isisd.h"
-#include "isisd/isis_constants.h"
-#include "isisd/isis_circuit.h"
 #include "isisd/isis_network.h"
 
 #include "privs.h"
@@ -452,11 +450,19 @@
   if (ioctl (fd, I_PUSH, "pfmod") == 0)
     {
       struct packetfilt pfil;
+      struct strioctl sioc;
 
       pfil.Pf_Priority = 0;
       pfil.Pf_FilterLen = sizeof (pf_filter) / sizeof (u_short);
       memcpy (pfil.Pf_Filter, pf_filter, sizeof (pf_filter));
-      ioctl (fd, PFIOCSETF, &pfil);
+      /* pfmod does not support transparent ioctls */
+      sioc.ic_cmd = PFIOCSETF;
+      sioc.ic_timout = 5;
+      sioc.ic_len = sizeof (struct packetfilt);
+      sioc.ic_dp = (char *)&pfil;
+      if (ioctl (fd, I_STR, &sioc) == -1)
+         zlog_warn("%s: could not perform PF_IOCSETF on %s",
+           __func__, circuit->interface->name); 
     }
 
   circuit->fd = fd;