netfilter newbie asking about writing matches

netfilter newbie asking about writing matches

[Ming-Ching Tiew]

Well I have asked about the user space counter part of
xt_statistic match in iptables but get no response in
netfilter@lists.netfilter.org.

Now I am getting into the iptables/extensions/libipt_random.c
itself. It is still using the wrong structure for passing into 
the kernel.

I have modified the C program to use struct xt_statistic_info
in everywhere of the C code. The iptables compiles now.
But my question is, now the iptables library is libipt_random.so,
whereis the kernel module is xt_statistic.ko, which part of
the iptables code which instruct the kernel to use xt_statistic.ko
for the matching ?

Don't fire me, I just just a newbie trying hard to get my work
accomplished.

Regards. 

Re: netfilter newbie asking about writing matches

[Patrick McHardy]

Ming-Ching Tiew wrote:
> Well I have asked about the user space counter part of
> xt_statistic match in iptables but get no response in
> netfilter@lists.netfilter.org.
> 
> Now I am getting into the iptables/extensions/libipt_random.c
> itself. It is still using the wrong structure for passing into 
> the kernel.
> 
> I have modified the C program to use struct xt_statistic_info
> in everywhere of the C code. The iptables compiles now.
> But my question is, now the iptables library is libipt_random.so,
> whereis the kernel module is xt_statistic.ko, which part of
> the iptables code which instruct the kernel to use xt_statistic.ko
> for the matching ?
> 
> Don't fire me, I just just a newbie trying hard to get my work
> accomplished.

I have a complete patch for userspace, just wanted to think
about splitting the current single match in two to provide
command line compatibility .. but not sure if this is even
possible. I'll add it soon.