From mboxrd@z Thu Jan 1 00:00:00 1970 MIME-Version: 1.0 In-Reply-To: <2e59e6970912230603r9a875e6rb5bc0da53e7d6ba6@mail.gmail.com> Message-ID: <00163600ce448e8674047b65d7bf@google.com> Date: Wed, 23 Dec 2009 14:07:25 +0000 From: jhautbois@gmail.com Content-Type: multipart/alternative; boundary=00163600ce448e8654047b65d7bc Subject: [Bridge] =?iso-8859-1?q?Re=A0=3ARe=3A__ebtables=2C_PF=5FPACKET_an?= =?iso-8859-1?q?d_other_stuff?= List-Id: Linux Ethernet Bridging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: "richardvoigt@gmail.com" , Jean-Michel Hautbois Cc: bridge@lists.linux-foundation.org --00163600ce448e8654047b65d7bc Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes > Send those packets to the ULOG target when dropping them. > From the ebtables manpage: > ulog > The ulog watcher passes the packet to a userspace logging daemon using > netlink multicast sockets. This differs from the log watcher in the > sense that the complete packet is sent to userspace instead of a > descriptive text and that netlink multicast sockets are used instead > of the syslog. This watcher enables parsing of packets with userspace > programs > (snip) Mmh, ok, but from the userspace point of view, how can I get them ? A SOCK_RAW ? JM --00163600ce448e8654047b65d7bc Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable > Send those packets to the ULOG target when dropping them.
> >
>
> From the ebtables manpage:
>
&= gt;
>
> ulog
>
>
>
> T= he ulog watcher passes the packet to a userspace logging daemon using
= >
> netlink multicast sockets. This differs from the log watche= r in the
>
> sense that the complete packet is sent to use= rspace instead of a
>
> descriptive text and that netlink = multicast sockets are used instead
>
> of the syslog. This= watcher enables parsing of packets with userspace
>
> pro= grams
>
> (snip)

Mmh, ok, but from the userspac= e point of view, how can I get them ? A SOCK_RAW ?

JM --00163600ce448e8654047b65d7bc--