All of lore.kernel.org
 help / color / mirror / Atom feed
From: Deborah Charan <dcharan@atcorp.com>
To: netfilter@vger.kernel.org
Subject: Multiple NFQUEUE numbers not quite working
Date: Wed, 05 May 2010 10:30:20 -0500	[thread overview]
Message-ID: <4BE18F0C.1010906@atcorp.com> (raw)

I have the following which has been simplified, I do have checks ...

h6 = nfq_open();
nfq_unbind_pf(h6, AF_INET6);
nfq_bind_pf(h6, AF_INET6);
qh = nfq_create_queue(h6, 1, callback1, data);
qh2 = nfq_create_queue(h6, 2, callback2, data);
nfq_set_queue_maxlen(qh, MAX_QUEUELEN);
nfq_set_queue_maxlen(qh2, MAX_QUEUELEN);

if (nfq_set_mode(qh, NFQNL_COPY_PACKET, BUFSIZE) < 0) ||
            (nfq_set_mode(qh2, NFQNL_COPY_NONE, BUFSIZE) < 0) )
...
I am trying to get a multicast packet, I've tried both of the following:

ip6tables -A INPUT -d ff02::02 -j  NFQUEUE --queue-num 2
ip6tables -A INPUT -p udp --dport 1234 -j NFQUEUE --queue-num 2

I then look at the data that is received, even though ip6tables -L -v 
shows that it has processed the packet, I never get the packet in 
callback2, I do get the packets that should be queued for callback1.  If 
I change the queue-num for qh2 to the same as qh I do get the data.

So I'm guessing it is not a multicast issue, since if I change the 
queue-num to 1 for the rules, it seems to work?

All the calls to the nfq functions pass, I can work around it by using 
one queue and looking at the data, any ideas?  Is the problem that I 
don't copy the packet data?  I just want the headers.

Thanks,
Debbie Charan


                 reply	other threads:[~2010-05-05 15:30 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4BE18F0C.1010906@atcorp.com \
    --to=dcharan@atcorp.com \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.