From: Ulysses Almeida <munky@maluco.com.br>
To: Netfilter Devel <netfilter-devel@lists.netfilter.org>
Subject: Re: libipq/payload doubt
Date: Wed, 19 May 2004 20:03:06 -0400 [thread overview]
Message-ID: <20040520000305.GA2227@maluco.com.br> (raw)
In-Reply-To: <1084960972.40ab30cc0af1c@chloride.lan.uchange.co.uk>
Thanks, all, I just tried with htons(), and every thing works fine.
Now I another doubt. I alredy read ip_queue.c, and alredy understood,
that payload is skb->data.
---
memcpy(pmsg->payload, entry->skb->data, data_len);
---
But, skb->data isn't clear enough on my head. If I queue every packge,
can I know which type is it? (TCP/UDP/ICMP), just looking for payload?
Packet data, can be analyzed on userspace, or maybe changed?
How can i get a payload X-ray?
When i tried something like printf ("%d\n", tcph->syn); i started to
recive "passer: Received message truncated: No such file or directory"
from my program. What is it means?
The last question, probably I can easily find on google, but the
other ones, I can't find that easy
I think that's it for today! (One day I'll be able to answer
begginers question, yes I will, I belive in that! ;))
On Wed, May 19, 2004 at 11:02:52AM +0100, Richard Bishop wrote:
>
> As one of the other guys said, the port discrepancy is an 'endian' problem.
>
> Try this code (attached) - I had exactly the same problem when I first started
> playing around with ipq. Bear in mind that I've skipped out all of the code for
> setting up the ipq handle etc, though if you've had it recieving packets then
> you'll have this already.
>
> Good luck!
>
>
> Richard
>
--
.~. Ulysses Almeida
/ V \ munky@maluco.com.br
/ ( ) \ Seja livre, use GNU/Linux!
^^-^^
next prev parent reply other threads:[~2004-05-20 0:03 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-05-19 6:20 libipq/payload doubt Ulysses Almeida
2004-05-19 6:47 ` Mike-Ro-Chanel
2004-05-19 6:53 ` Chandrakanth Chereddi
2004-05-19 10:02 ` Richard Bishop
2004-05-20 0:03 ` Ulysses Almeida [this message]
2004-05-20 2:11 ` Ulysses Almeida
2004-05-20 13:33 ` Scott MacKay
2004-05-20 15:02 ` Henrik Nordstrom
2004-05-20 16:24 ` Scott MacKay
2004-05-20 14:58 ` Henrik Nordstrom
2004-05-20 2:11 ` Richard Bishop
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040520000305.GA2227@maluco.com.br \
--to=munky@maluco.com.br \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.