* capture arp in hook and queue to userspace
@ 2004-08-25 9:24 Magnus Westbergh
0 siblings, 0 replies; 5+ messages in thread
From: Magnus Westbergh @ 2004-08-25 9:24 UTC (permalink / raw)
To: netfilter
Hello,
I intend to capture all incoming packets (IP and ARP) and queue them for
userspace using the ip_queue module, and let my userspace application make
all verdicts. I have written a module using netfilter, and successfully
queued all IP-packets, but now I have no clue how to capture the ARP
packets, using this hook...
my_pre.hook = my_in_hook;
my_pre.hooknum = NF_IP_PRE_ROUTING;
my_pre.pf = PF_INET;
my_pre.priority = NF_IP_PRI_FIRST;
unsigned int my_in_hook( unsigned int hooknum,
struct sk_buff **skb,
const struct net_device *in,
const struct net_device *out,
int ( *okfn ) ( struct sk_buff *) )
How does the ARP hook work? What do I have to change to capture all ARP
packets? Please show me an example
Thanks for helping me,
Sincerely Magnus
^ permalink raw reply [flat|nested] 5+ messages in thread* Re: capture arp in hook and queue to userspace
@ 2004-08-25 10:16 aksingh
0 siblings, 0 replies; 5+ messages in thread
From: aksingh @ 2004-08-25 10:16 UTC (permalink / raw)
To: magnus; +Cc: netfilter
ARP packets are not really IP packets, hence I dont think you can catch
them using netfilter hooks as they sit in the IP layer.
regards
Amit
"Magnus Westbergh" <magnus@comcon.se>@lists.netfilter.org on 08/25/2004
02:54:30 PM
Please respond to magnus@comcon.se
Sent by: netfilter-bounces@lists.netfilter.org
To: <netfilter@lists.netfilter.org>
cc:
Subject: capture arp in hook and queue to userspace
Hello,
I intend to capture all incoming packets (IP and ARP) and queue them for
userspace using the ip_queue module, and let my userspace application make
all verdicts. I have written a module using netfilter, and successfully
queued all IP-packets, but now I have no clue how to capture the ARP
packets, using this hook...
my_pre.hook = my_in_hook;
my_pre.hooknum = NF_IP_PRE_ROUTING;
my_pre.pf = PF_INET;
my_pre.priority = NF_IP_PRI_FIRST;
unsigned int my_in_hook( unsigned int hooknum,
struct sk_buff **skb,
const struct net_device *in,
const struct net_device *out,
int ( *okfn ) ( struct sk_buff *) )
How does the ARP hook work? What do I have to change to capture all ARP
packets? Please show me an example
Thanks for helping me,
Sincerely Magnus
***************** HSS-Unclassified *************
^ permalink raw reply [flat|nested] 5+ messages in thread* RE: capture arp in hook and queue to userspace
@ 2004-08-25 15:06 Hudson Delbert J Contr 61 CS/SCBN
0 siblings, 0 replies; 5+ messages in thread
From: Hudson Delbert J Contr 61 CS/SCBN @ 2004-08-25 15:06 UTC (permalink / raw)
To: 'aksingh@hss.hns.com', magnus; +Cc: netfilter
buy a sniffer or check out dug song's modules at monkey.org.
v/r,
~piranha
-----Original Message-----
From: netfilter-bounces@lists.netfilter.org
[mailto:netfilter-bounces@lists.netfilter.org]On Behalf Of
aksingh@hss.hns.com
Sent: Wednesday, August 25, 2004 3:16 AM
To: magnus@comcon.se
Cc: netfilter@lists.netfilter.org
Subject: Re: capture arp in hook and queue to userspace
ARP packets are not really IP packets, hence I dont think you can catch
them using netfilter hooks as they sit in the IP layer.
regards
Amit
"Magnus Westbergh" <magnus@comcon.se>@lists.netfilter.org on 08/25/2004
02:54:30 PM
Please respond to magnus@comcon.se
Sent by: netfilter-bounces@lists.netfilter.org
To: <netfilter@lists.netfilter.org>
cc:
Subject: capture arp in hook and queue to userspace
Hello,
I intend to capture all incoming packets (IP and ARP) and queue them for
userspace using the ip_queue module, and let my userspace application make
all verdicts. I have written a module using netfilter, and successfully
queued all IP-packets, but now I have no clue how to capture the ARP
packets, using this hook...
my_pre.hook = my_in_hook;
my_pre.hooknum = NF_IP_PRE_ROUTING;
my_pre.pf = PF_INET;
my_pre.priority = NF_IP_PRI_FIRST;
unsigned int my_in_hook( unsigned int hooknum,
struct sk_buff **skb,
const struct net_device *in,
const struct net_device *out,
int ( *okfn ) ( struct sk_buff *) )
How does the ARP hook work? What do I have to change to capture all ARP
packets? Please show me an example
Thanks for helping me,
Sincerely Magnus
***************** HSS-Unclassified *************
^ permalink raw reply [flat|nested] 5+ messages in thread* RE: capture arp in hook and queue to userspace
@ 2004-08-25 15:09 Piszcz, Justin Michael
2004-08-25 15:17 ` Cedric Blancher
0 siblings, 1 reply; 5+ messages in thread
From: Piszcz, Justin Michael @ 2004-08-25 15:09 UTC (permalink / raw)
To: Hudson Delbert J Contr 61 CS/SCBN, aksingh, magnus; +Cc: netfilter
Doesn't etables handle ARP packets?
-----Original Message-----
From: netfilter-bounces@lists.netfilter.org
[mailto:netfilter-bounces@lists.netfilter.org] On Behalf Of Hudson
Delbert J Contr 61 CS/SCBN
Sent: Wednesday, August 25, 2004 11:07 AM
To: 'aksingh@hss.hns.com'; magnus@comcon.se
Cc: netfilter@lists.netfilter.org
Subject: RE: capture arp in hook and queue to userspace
buy a sniffer or check out dug song's modules at monkey.org.
v/r,
~piranha
-----Original Message-----
From: netfilter-bounces@lists.netfilter.org
[mailto:netfilter-bounces@lists.netfilter.org]On Behalf Of
aksingh@hss.hns.com
Sent: Wednesday, August 25, 2004 3:16 AM
To: magnus@comcon.se
Cc: netfilter@lists.netfilter.org
Subject: Re: capture arp in hook and queue to userspace
ARP packets are not really IP packets, hence I dont think you can catch
them using netfilter hooks as they sit in the IP layer.
regards
Amit
"Magnus Westbergh" <magnus@comcon.se>@lists.netfilter.org on 08/25/2004
02:54:30 PM
Please respond to magnus@comcon.se
Sent by: netfilter-bounces@lists.netfilter.org
To: <netfilter@lists.netfilter.org>
cc:
Subject: capture arp in hook and queue to userspace
Hello,
I intend to capture all incoming packets (IP and ARP) and queue them for
userspace using the ip_queue module, and let my userspace application
make
all verdicts. I have written a module using netfilter, and successfully
queued all IP-packets, but now I have no clue how to capture the ARP
packets, using this hook...
my_pre.hook = my_in_hook;
my_pre.hooknum = NF_IP_PRE_ROUTING;
my_pre.pf = PF_INET;
my_pre.priority = NF_IP_PRI_FIRST;
unsigned int my_in_hook( unsigned int hooknum,
struct sk_buff **skb,
const struct net_device *in,
const struct net_device *out,
int ( *okfn ) ( struct sk_buff *) )
How does the ARP hook work? What do I have to change to capture all ARP
packets? Please show me an example
Thanks for helping me,
Sincerely Magnus
***************** HSS-Unclassified *************
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2004-08-25 15:17 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-08-25 9:24 capture arp in hook and queue to userspace Magnus Westbergh
-- strict thread matches above, loose matches on Subject: below --
2004-08-25 10:16 aksingh
2004-08-25 15:06 Hudson Delbert J Contr 61 CS/SCBN
2004-08-25 15:09 Piszcz, Justin Michael
2004-08-25 15:17 ` Cedric Blancher
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.