From: Petr Chmelar <chmelab@gmail.com>
To: netfilter@vger.kernel.org
Subject: How to make conntrack to process all packets?
Date: Tue, 09 Jul 2013 20:09:15 +0200 [thread overview]
Message-ID: <51DC51CB.5050002@gmail.com> (raw)
Hi there,
We would like to use Ulogd's NFCT input for intelligent netflow-based
statistics reporting. The problem is that the netfilter_conntrack
doesn't process connections that don't go through the system (we have
noticed and found in man conntrack /TABLES), which we need to process
because of sniffing in promisc mode (we have forwarded traffic from
different vlans). This doesn't work even when we do something like:
iptables -I PREROUTING -i eth9.10 -t raw -j CT
In fact we're looking for an opposite of NOTRACK. Do you have any idea
how to setup or recompile the libnetfilter_conntrack or similar (ulogd2)
so we get also flows not destined for the system?
Thank you, Petr
next reply other threads:[~2013-07-09 18:09 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-07-09 18:09 Petr Chmelar [this message]
2013-07-11 9:21 ` How to make conntrack to process all packets? Pascal Hambourg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=51DC51CB.5050002@gmail.com \
--to=chmelab@gmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox