P K wrote: > Hi, > > I want to track the Source IP for outgoing packets which are > masqueraded via iptables in Linux kernel while routing the packet to > destination. > > I was using kprobe for nf_nat_ipv4_manip_pkt for the same but which is > not working anymore in the latest kernel 6.1.66-1 onwards. > > What would be the best way to do the same in bpf or kprobe? > Why is it not working anymore. Presumably because the function was removed or maybe got inlined in newer kernels. Either way looking for a similar function on 6.1.+ would be one answer. Perhaps a more stable approach would be ot use the sock ops hooks. I would just grep for sockops in ./tools/testing/sefltests/bpf/ to see examples on how to do this. Thanks, John
