From: Eric Leblond <eric@inl.fr>
To: Gilad Benjamini <gilad.benjamini@gmail.com>
Cc: netfilter <netfilter@vger.kernel.org>
Subject: Re: ULOG vs. NFQUEUE
Date: Sat, 01 Dec 2007 23:33:14 +0100 [thread overview]
Message-ID: <1196548394.16574.42.camel@localhost> (raw)
In-Reply-To: <d95317090712011033k6e02776eiabff90210c7fb97d@mail.gmail.com>
[-- Attachment #1: Type: text/plain, Size: 696 bytes --]
Hi,
Le samedi 01 décembre 2007 à 10:33 -0800, Gilad Benjamini a écrit :
> Thanks.
> If I wouldn't be missing the whole thing, I wouldn't have asked this question.
> Your example implies that the packets need to be "injected" back into
> the packet flow.
> How is this done ?
This is done by calling nfq_set_verdict or nfq_set_verdict_mark in
userspace.
kernel gives a id to the packet before sending it to userspace via
[nf]netlink. It then waits for a [nf]netlink message from userspace
which will tell them what to do with the packet identified by its id.
As you may guess, the packet id is an argument of the verdict function.
BR,
--
Eric Leblond <eric@inl.fr>
INL
[-- Attachment #2: Ceci est une partie de message numériquement signée --]
[-- Type: application/pgp-signature, Size: 189 bytes --]
prev parent reply other threads:[~2007-12-01 22:33 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-11-30 23:06 ULOG vs. NFQUEUE Gilad Benjamini
2007-12-01 11:14 ` Eric Leblond
[not found] ` <d95317090712011033k6e02776eiabff90210c7fb97d@mail.gmail.com>
2007-12-01 22:33 ` Eric Leblond [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1196548394.16574.42.camel@localhost \
--to=eric@inl.fr \
--cc=gilad.benjamini@gmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox