* Alternatively @ 2015-04-15 11:21 Kees-Jan Hermans 2015-04-15 11:25 ` Alternatively Eric Leblond 0 siblings, 1 reply; 2+ messages in thread From: Kees-Jan Hermans @ 2015-04-15 11:21 UTC (permalink / raw) To: netfilter@vger.kernel.org Could someone please explain how the nfq_set_verdict function works? More specifically, what must be in the data_len and buf parameters - an IP packet (like the one you get out of nfq_get_payload())? Must it be the same pointer as you get out of nfq_get_payload or may it be different? The documentation is a bit terse on that. Thanks! KJ ^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Alternatively 2015-04-15 11:21 Alternatively Kees-Jan Hermans @ 2015-04-15 11:25 ` Eric Leblond 0 siblings, 0 replies; 2+ messages in thread From: Eric Leblond @ 2015-04-15 11:25 UTC (permalink / raw) To: Kees-Jan Hermans; +Cc: netfilter@vger.kernel.org Hi, On Wed, 2015-04-15 at 11:21 +0000, Kees-Jan Hermans wrote: > Could someone please explain how the nfq_set_verdict function works? More specifically, what must be in the data_len and buf parameters - an IP packet (like the one you get out of nfq_get_payload())? Must it be the same pointer as you get out of nfq_get_payload or may it be different? The documentation is a bit terse on that. 0 and NULL are ok if you don't want to do packet modification. It you wanna modify packet then you pass the raw IP data and the length. Please note that if you set checksum to 0 they will be compute by the kernel. Please check: https://home.regit.org/netfilter-en/using-nfqueue-and-libnetfilter_queue/ BR, -- Eric Leblond <eric@regit.org> ^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2015-04-15 11:25 UTC | newest] Thread overview: 2+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2015-04-15 11:21 Alternatively Kees-Jan Hermans 2015-04-15 11:25 ` Alternatively Eric Leblond
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox