nfqws: do not reset conntrack entry in SYN state

4 years ago · 0c76290440
1 changed files with 2 additions and 2 deletions
--- a/nfq/conntrack.c
+++ b/nfq/conntrack.c
@ -126,12 +126,12 @@ static void ConntrackFeedPacket(t_ctrack *t, bool bReverse, const struct tcphdr
 	uint8_t scale;
 	if (tcp_syn_segment(tcphdr))
 	{
-		ConntrackInitTrack(t); // erase current entry
+		if (t->state!=SYN) ConntrackInitTrack(t); // erase current entry
 		t->seq0 = htonl(tcphdr->th_seq);
 	}
 	else if (tcp_synack_segment(tcphdr))
 	{
-		ConntrackInitTrack(t); // erase current entry
+		if (t->state!=SYN) ConntrackInitTrack(t); // erase current entry
 		if (!t->seq0) t->seq0 = htonl(tcphdr->th_ack)-1;
 		t->ack0 = htonl(tcphdr->th_seq);
 	}