NFTables Internals

NFTables Internals

[mark diener]

Thanks for all the responses about the internals of NFTables

The best starter document was this:

https://workshop.netfilter.org/2016/wiki/images/7/78/Nft-tutorial.pdf

Now I just need to figure out how to interpet the "payload load 4b @
network_header + 12" nomenclature to really get a handle on things.

Any more documents or videos to understand the internals?
(Instead of hours spent looking at source code!)

Thanks,

md

Re: NFTables Internals

[Florian Westphal]

mark diener <rpzrpzrpz@gmail.com> wrote:
> https://workshop.netfilter.org/2016/wiki/images/7/78/Nft-tutorial.pdf
> 
> Now I just need to figure out how to interpet the "payload load 4b @
> network_header + 12" nomenclature to really get a handle on things.

It tells the payload expression to load 4 bytes, with offset 12,
realtive to network header (base).

> Any more documents or videos to understand the internals?
> (Instead of hours spent looking at source code!)

Whats your goal?

If you really want to learn the internal workings source code is indeed
best option.