On Thu, 30 Oct 2008 17:47:09 +0100, Sebastien Tricaud <stricaud@inl.fr>
wrote:
> On Thu, 2008-10-30 at 08:49 -0700, Gilad Benjamini wrote:
>> I need to create a userland simulation for filtering packets.
>> I remember running into a userland netfilter, but can't seem to find it.
>> Any
>> pointers or info would be appreciated.
>> Another option is to feed the packets into tun/tap devices, and let the
>> real
>> netfilter do the job. Performance, of course, is not a concern in my
>> case.
>> Does that sound reasonable ? Tun/tap seems to be an almost dead project.
>> Will it work in newer distributions ?
>> 
> 
> Hello Gilad,
> 
> I highly recommend you to use Pierre easy bindings, so that you can
> write your simulation in either Perl or Python :
> 
> http://software.inl.fr/trac/wiki/nfqueue-bindings
> 

Hi There,

Processing packets in perl or python ? Even if performances are not an
issue, you may want to be able to do something on the packet before the
user dies, no ?... :)

Just kidding, in fact, I found the regular netfilter queue library very
easy and convenient to use in C (see the code attached). And the
performances have nothing to be ashamed of...

http://netfilter.org/projects/libnetfilter_queue/downloads.html

Regards,
Julien

> 
> Regards,
> Sebastien Tricaud.
> 
> 
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> 

-- 
www.linuxwall.info