Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Pablo Neira Ayuso <pablo@eurodev.net>
To: mikado4vn@gmail.com
Cc: netfilter-devel@lists.netfilter.org, netfilter@lists.netfilter.org
Subject: Re: How to obtain process ID that created connection or owns one packet
Date: Sat, 24 Dec 2005 15:20:36 +0100	[thread overview]
Message-ID: <43AD5934.3050700@eurodev.net> (raw)
In-Reply-To: <43AC263E.7080508@gmail.com>

Mikado wrote:
> Thanks all! Finally I found the answer in 'struct sk_buff':
> 
> struct sk_buff ( #include <linux/skbuff.h> )
> |_struct sock ( #include <net/sock.h> )
>   |_struct socket ( #include <linux/net.h> )
>     |_struct file ( #include <linux/fs.h> )
>       |_struct fown_struct ( #include <linux/fs.h> )
>         |_int pid

Yes, but AFAIK you can only use that in the OUTPUT hook, not in the
INPUT path. If my mind serves well, I remember that Patrick McHardy
posted some patches to add support for socket filtering some time ago. I
don't know what is the status of such work.

-- 
Pablo


  reply	other threads:[~2005-12-24 14:20 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-12-19  4:54 Conntrack + Connection owner Mikado 4VN
2005-12-19 17:14 ` Pablo Neira Ayuso
2005-12-19 17:21   ` Pablo Neira Ayuso
2005-12-20  2:49     ` Mikado
2005-12-23 12:27     ` How to obtain process ID that created connection or owns one packet Mikado
2005-12-23 13:36       ` Edmundo Carmona
2005-12-23 14:32         ` Mikado
2005-12-23 16:30       ` Mikado
2005-12-24 14:20         ` Pablo Neira Ayuso [this message]
2005-12-26 15:46           ` Mikado
2005-12-27 17:58           ` Marcus Sundberg
2005-12-27 19:28             ` Pablo Neira Ayuso

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=43AD5934.3050700@eurodev.net \
    --to=pablo@eurodev.net \
    --cc=mikado4vn@gmail.com \
    --cc=netfilter-devel@lists.netfilter.org \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox