When printing messages about dropping IPv6, do not print anything about ihl.

[secnet.git] / netlink.c

diff --git a/netlink.c b/netlink.c
index 9556e60ab203cb53973a525e7e0f7a49b998c0ff..83b470e7bbc5af2101ea10807dce38ee5446d061 100644 (file)
--- a/netlink.c
+++ b/netlink.c
@@ -487,8 +487,8 @@ static bool_t netlink_check(struct netlink *st, struct buffer_if *buf,
     struct iphdr *iph=(struct iphdr *)buf->start;
     int32_t len;
 
-    if (iph->ihl < 5) BAD("ihl %u",iph->ihl);
     if (iph->version != 4) BAD("version %u",iph->version);
+    if (iph->ihl < 5) BAD("ihl %u",iph->ihl);
     if (buf->size < iph->ihl*4) BAD("size %"PRId32"<%u*4",buf->size,iph->ihl);
     if (ip_fast_csum((uint8_t *)iph, iph->ihl)!=0) BAD("csum");
     len=ntohs(iph->tot_len);