Duplicated multicast packets with -j ROUTE --tee

Duplicated multicast packets with -j ROUTE --tee

[Javier Gálvez Guerrero]

Hi everyone,

I'm a complete newbie with iptables. I've read some tutorials from
netfilters.org in order to have a look about how to proceed. I'm
generating a multicast flow and, in order to take some research
results, I would like to duplicate the packets in the source computer
through the ethernet interface.

I'm working in a Debian machine with kernel 2.6.18-6-686 and iptables
version 1.3.6. I have done some research with google and, eventually,
I've tried this:

  # iptables -t mangle -A OUTPUT -d 239.255.1.0/24 -o eth0 -j ROUTE
--tee --oif eth0

but I obtain:

  iptables: No chain/target/match by that name

Besides that, if I try the same without specifying what ROUTE should do:

  # iptables -t mangle -A OUTPUT -d 239.255.1.0/24 -o eth0 -j ROUTE

I get:

  iptables v1.3.6: ROUTE target: oif, iif or gw option required
  Try `iptables -h' or 'iptables --help' for more information.

Then, I think that the ROUTE target is included in the kernel, so I
suppose there's no need to apply a patch and recompile the kernel but
I don't know what to do in order to succeed in this.Hi everyone,

Anyway, I would like to get some help for more experienced users or
anyone who has dealed with this issue. Any help would be much
appreciated.


Thank you all,
Javi

PS: Some issues with formatted text. Sorry.

Re: Duplicated multicast packets with -j ROUTE --tee

[Javier Gálvez Guerrero]

Hi again,

Although I thought the ROUTE target was installed, the file
ip_tables_targets is completely empty and it should contain the
applied targets, shouldn't it? So, I'm trying to patch the kernel with
the ROUTE target following the patch-o-matic tutorial in netfilter.org
site.

The problem is that when I click 'y' in order to install the ROUTE
target/patch the following error message appears:

    unable to find ladd slot in src /tmp/pom-10667/net/ipv6/netfilter/Makefile

The number in pom-XXXX changes each time I try to patch the kernel (it
seems obvious as it is located in the tmp directory). Anyway, I don't
know how to cope with this.

As you can see, I'm not an experienced kernel patcher, so that's why I
would appreciate any help you could provide to me.


Thanks a lot,
Javi

2008/6/17 Javier Gálvez Guerrero <javier.galvez.guerrero@gmail.com>:
> Hi everyone,
>
> I'm a complete newbie with iptables. I've read some tutorials from
> netfilters.org in order to have a look about how to proceed. I'm
> generating a multicast flow and, in order to take some research
> results, I would like to duplicate the packets in the source computer
> through the ethernet interface.
>
> I'm working in a Debian machine with kernel 2.6.18-6-686 and iptables
> version 1.3.6. I have done some research with google and, eventually,
> I've tried this:
>
>  # iptables -t mangle -A OUTPUT -d 239.255.1.0/24 -o eth0 -j ROUTE
> --tee --oif eth0
>
> but I obtain:
>
>  iptables: No chain/target/match by that name
>
> Besides that, if I try the same without specifying what ROUTE should do:
>
>  # iptables -t mangle -A OUTPUT -d 239.255.1.0/24 -o eth0 -j ROUTE
>
> I get:
>
>  iptables v1.3.6: ROUTE target: oif, iif or gw option required
>  Try `iptables -h' or 'iptables --help' for more information.
>
> Then, I think that the ROUTE target is included in the kernel, so I
> suppose there's no need to apply a patch and recompile the kernel but
> I don't know what to do in order to succeed in this.Hi everyone,
>
> Anyway, I would like to get some help for more experienced users or
> anyone who has dealed with this issue. Any help would be much
> appreciated.
>
>
> Thank you all,
> Javi
>
> PS: Some issues with formatted text. Sorry.
>

Re: Duplicated multicast packets with -j ROUTE --tee

[Jan Engelhardt]

On Tuesday 2008-06-17 15:39, Javier Gálvez Guerrero wrote:

>Hi again,
>
>Although I thought the ROUTE target was installed, the file
>ip_tables_targets is completely empty and it should contain the
>applied targets, shouldn't it? So, I'm trying to patch the kernel with
>the ROUTE target following the patch-o-matic tutorial in netfilter.org
>site.

http://marc.info/?l=netfilter&m=121346341804721&w=2