From mboxrd@z Thu Jan  1 00:00:00 1970
From: =?ISO-8859-2?Q?G=E1sp=E1r_Lajos?= <gaspar.lajos@whb.hu>
Subject: Re: libpcap (tcpdump) and netfilter (iptables)
Date: Wed, 29 Oct 2008 14:56:31 +0100
Message-ID: <49086B8F.1070207@whb.hu>
References: <49086324.9060900@laposte.net>
Mime-Version: 1.0
Content-Transfer-Encoding: QUOTED-PRINTABLE
Return-path: <netfilter-owner@vger.kernel.org>
In-Reply-To: <49086324.9060900@laposte.net>
Sender: netfilter-owner@vger.kernel.org
List-ID: <netfilter.vger.kernel.org>
Content-Type: text/plain; charset="iso-8859-1"; format="flowed"
To: Pierre LEBRECH <pierre.lebrech@laposte.net>
Cc: netfilter@vger.kernel.org

Hi!

Short answer: Yes. tcpdump sees every packet.

Long answer:

http://www.google.hu/search?q=3Diptables+tcpdump

http://mydebian.blogdns.org/?p=3D85

Swifty

Pierre LEBRECH =EDrta:
> Hi,
>
> It seems that even if I drop some INPUT packets with iptables, tcpdum=
p
> still sees these packets arriving on the ethernet interface.
>
> Could anybody explain me a bit about this?
>
> Thanks
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" =
in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>
>
>  =20