From 3f7df8cd299636dea68b5a556fbacf0a26012a16 Mon Sep 17 00:00:00 2001 From: Nelson Castillo Date: Thu, 2 Apr 2026 18:29:27 +0000 Subject: [PATCH] Fix IPv6 destination anonymization using wrong address The anon_dst block in AnonRecord() passes srcAddr to anonymize_v6() instead of dstAddr, so the destination ends up with an anonymized copy of the source rather than its own address. --- src/nfanon/nfanon.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/nfanon/nfanon.c b/src/nfanon/nfanon.c index 87b2b8bd..f3258346 100755 --- a/src/nfanon/nfanon.c +++ b/src/nfanon/nfanon.c @@ -209,7 +209,7 @@ static inline void AnonRecord(recordHeaderV3_t *v3Record, int anon_src, int anon } if (anon_dst) { - anonymize_v6(ipv6Flow->srcAddr, anon_ip); + anonymize_v6(ipv6Flow->dstAddr, anon_ip); ipv6Flow->dstAddr[0] = anon_ip[0]; ipv6Flow->dstAddr[1] = anon_ip[1]; }