All of lore.kernel.org
 help / color / mirror / Atom feed
* Logging user id and process id of packets
@ 2006-03-28 10:29 ceving
  2006-03-28 14:31 ` Daniel De Graaf
  0 siblings, 1 reply; 2+ messages in thread
From: ceving @ 2006-03-28 10:29 UTC (permalink / raw)
  To: netfilter-devel

Hi,

I would like to write a program which displays the user id and process id of all packets traversing the output chain.

I found some information about the owner module, but this allows only to filter based on a user id.

I took also a look at the pcap library, the ulog and libipq but can not find any function, that returns me the user id or the process id of a packet.

Does anybody know how to get this information?

Sascha

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: Logging user id and process id of packets
  2006-03-28 10:29 Logging user id and process id of packets ceving
@ 2006-03-28 14:31 ` Daniel De Graaf
  0 siblings, 0 replies; 2+ messages in thread
From: Daniel De Graaf @ 2006-03-28 14:31 UTC (permalink / raw)
  To: netfilter-devel

On 3/28/06, ceving@web.de <ceving@web.de> wrote:
> Hi,
>
> I would like to write a program which displays the user id and process id of all packets traversing the output chain.
>
> I found some information about the owner module, but this allows only to filter based on a user id.
>
> I took also a look at the pcap library, the ulog and libipq but can not find any function, that returns me the user id or the process id of a packet.
>
> Does anybody know how to get this information?
>
> Sascha
>

You need to get the inode for the connection (possibly using
/proc/net/tcp) and then find the process which has that inode open.

- Daniel De Graaf

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2006-03-28 14:31 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-03-28 10:29 Logging user id and process id of packets ceving
2006-03-28 14:31 ` Daniel De Graaf

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.