Hook on non standard protocol families

Hook on non standard protocol families

[Yaron Galula]

Hello,

I'd like to try and hook some non standard protocol families, such as
PF_CAN for example.

Is that possible?

I have tried using nf_register_hook() with NFPROTO_UNSPEC hoping it
will act as a wildcard, but the module I have built and loaded does
not seem to be in use (it does work when I replace NFPROTO_UNSPEC with
PF_INET).

I would really appreciate your help in making this work.

Thanks!
Yaron

Re: Hook on non standard protocol families

[Florian Westphal]

Yaron Galula <ygalula@gmail.com> wrote:
> I'd like to try and hook some non standard protocol families, such as
> PF_CAN for example.
>
> Is that possible?

No.

> I have tried using nf_register_hook() with NFPROTO_UNSPEC hoping it
> will act as a wildcard, but the module I have built and loaded does
> not seem to be in use (it does work when I replace NFPROTO_UNSPEC with
> PF_INET).

Sure, because ipv4 core calls that via NF_HOOK() at various places.

> I would really appreciate your help in making this work.

At the very least you need to change the CAN core to call
netfilter hooks at the right places.

Look at ipv4 or ipv6 as a template.