I have no idea what the intention behind this change was, but it
seems bogus, the output format should (mostly) match ipt_LOG.
switch (protocol) {
case IPPROTO_TCP:
- buf_cur += sprintf(buf_cur, "PROTO=KEY_TCP ");
+ buf_cur += sprintf(buf_cur, "PROTO=TCP ");
if (!pp_is_valid(res, KEY_TCP_SPORT)) {
buf_cur += sprintf(buf_cur, "INCOMPLETE");
break;
case IPPROTO_UDP:
- buf_cur += sprintf(buf_cur, "PROTO=KEY_UDP ");
+ buf_cur += sprintf(buf_cur, "PROTO=UDP ");
if (!pp_is_valid(res, KEY_UDP_SPORT)) {
buf_cur += sprintf(buf_cur, "INCOMPLETE");