IP tracking

IP tracking

[Hannu Sehm]

I need to track MAC and IP addresses of incoming traffic. And I need to
forward these parameters to an other program for tracking issues. Can I do
this with netfilter/iptables?

-Hannu

Re: IP tracking

[Cedric Blancher]

Le sam 03/05/2003 à 20:56, Hannu Sehm a écrit :
> I need to track MAC and IP addresses of incoming traffic. And I need to
> forward these parameters to an other program for tracking issues. Can I do
> this with netfilter/iptables?

Spot packets in INPUT chain with mac match and source IP match. Then, if
you only need parameters, but no action on packet, you can use ULOG
target :

	http://gnumonks.org/projects/project_details?p_id=1

You can write your own "listener" and have it listen to ulog socket.

Or you can send packet to userland using QUEUE target, treat it with
your own application and maybe reinject it. You can find sample code at
:

	http://gnumonks.org/projects/project_details?p_id=3
	http://gnumonks.org/projects/project_details?p_id=2

-- 
Cédric Blancher  <blancher@cartel-securite.fr>
IT systems and networks security - Cartel Sécurité
Phone : +33 (0)1 44 06 97 87 - Fax: +33 (0)1 44 06 97 99
PGP KeyID:157E98EE  FingerPrint:FA62226DA9E72FA8AECAA240008B480E157E98EE