Re: grabbing all IP packets

• Next message: Ulrich Drepper: "Re: Stuff dragged in by crt1 (was Re: Announce: initrd-tftp 0.1)"
• Previous message: Michel Catudal: "Crash during mouting of floppy with kernel 2.3.38"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

chris@oskar.dev.nanoteq.co.za (Chris Bohme) writes:

> Hi,
>
> I am trying to find a way to catch all IP packets (OUTGOING, HOST,
> OTHERHOST etc.) before the rest of the stack processes them.
>
> It is important that this is done from a module and involves no patching of the
> kernel source.
>
> Doing a dev_add_pack() with type ETH_P_IP only gets incoming packets and
> ETH_P_ALL clones the sk_buff's. It is important that the packet is not
> duplicated as this is intended to be used for a firewall type of
> application.

See register_firewall() and friends.

And note that you have to be very careful with the include files in
your proprietary module -- some have inline functions which are GPLed.

-Andi

-- 
This is like TV. I don't like TV.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

• Next message: Ulrich Drepper: "Re: Stuff dragged in by crt1 (was Re: Announce: initrd-tftp 0.1)"
• Previous message: Michel Catudal: "Crash during mouting of floppy with kernel 2.3.38"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b29 : Sat Jan 15 2000 - 21:00:17 EST