* IP tracking [not found] <20030503180002.30563.49757.Mailman@kashyyyk> @ 2003-05-03 18:56 ` Hannu Sehm 2003-05-03 23:22 ` Cedric Blancher 0 siblings, 1 reply; 2+ messages in thread From: Hannu Sehm @ 2003-05-03 18:56 UTC (permalink / raw) To: netfilter I need to track MAC and IP addresses of incoming traffic. And I need to forward these parameters to an other program for tracking issues. Can I do this with netfilter/iptables? -Hannu ^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: IP tracking 2003-05-03 18:56 ` IP tracking Hannu Sehm @ 2003-05-03 23:22 ` Cedric Blancher 0 siblings, 0 replies; 2+ messages in thread From: Cedric Blancher @ 2003-05-03 23:22 UTC (permalink / raw) To: Hannu Sehm; +Cc: netfilter Le sam 03/05/2003 à 20:56, Hannu Sehm a écrit : > I need to track MAC and IP addresses of incoming traffic. And I need to > forward these parameters to an other program for tracking issues. Can I do > this with netfilter/iptables? Spot packets in INPUT chain with mac match and source IP match. Then, if you only need parameters, but no action on packet, you can use ULOG target : http://gnumonks.org/projects/project_details?p_id=1 You can write your own "listener" and have it listen to ulog socket. Or you can send packet to userland using QUEUE target, treat it with your own application and maybe reinject it. You can find sample code at : http://gnumonks.org/projects/project_details?p_id=3 http://gnumonks.org/projects/project_details?p_id=2 -- Cédric Blancher <blancher@cartel-securite.fr> IT systems and networks security - Cartel Sécurité Phone : +33 (0)1 44 06 97 87 - Fax: +33 (0)1 44 06 97 99 PGP KeyID:157E98EE FingerPrint:FA62226DA9E72FA8AECAA240008B480E157E98EE ^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2003-05-03 23:22 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <20030503180002.30563.49757.Mailman@kashyyyk>
2003-05-03 18:56 ` IP tracking Hannu Sehm
2003-05-03 23:22 ` Cedric Blancher
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox