dyoung@pobox.com said:
> IMO, it is desirable (also, harmless and unsurprising) to enforce
> this. 

Yes -- one might consider ipv4 a subset of ipv6, but not the other
way round.
Just had a look ad identd.c which is the only other user of that
code path. It sets the pf to the af in userland:
        mib[1] = ss->ss_family;

So, for consistency and whatever - tcpdrop should do the same.
(which assumes that corresponding af and pf have the
same numerical value is accepted practice)

Also tried identd with link-local ipv6 connections: It also needs
the "sa6_embedscope()" as posted previously to work.

best regards
Matthias


Forschungszentrum Juelich GmbH
52425 Juelich

Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzende des Aufsichtsrats: MinDirig'in Baerbel Brumme-Bothe
Vorstand: Prof. Dr. Achim Bachem (Vorsitzender), Dr. Ulrich Krafft (stellv. 
Vorsitzender)