From: "Moshe Ashkenazi" <moshea@checkpoint.com>
To: netfilter@lists.netfilter.org
Subject: FW: libipq question
Date: Thu, 22 Apr 2004 12:40:36 +0200 [thread overview]
Message-ID: <004301c42856$3f54ff50$9b281dc2@luli> (raw)
[-- Attachment #1: Type: text/plain, Size: 826 bytes --]
Hi, List -
I'm using QUEUE target in order to send TCP packets to user space, using
"IPQ_COPY_PACKET" I'm telling the kernel that I want the entire packet.
I know that the kernel send to user space the following structure
"ipq_packet_msg_t", and this structure include the payload member which
include the optional packet data.
When I'm examining the content of the payload array I see that it
include the following:
20 bytes IP header -> 20 bytes TCP header, and 20 bytes????
My questions are:
1. What should the payload include?
2. What are the last 20 bytes in the payload?
Example of payload array:
----- Optional packet data -----
45 10 0 3c f8 f8 40 0 3f 6 6f 64 c2 1d 28 90
c0 a8 27 f9 82 e7 4 d2 cf 1f 40 f5 0 0 0 0
a0 2 16 d0 f7 eb 0 0 2 4 5 b4 4 2 8 a
16 20 b8 d 0 0 0 0 1 3 3 0
[-- Attachment #2: Type: text/html, Size: 8634 bytes --]
reply other threads:[~2004-04-22 10:40 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='004301c42856$3f54ff50$9b281dc2@luli' \
--to=moshea@checkpoint.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox