Hi, Am 10.04.2014 um 13:01 schrieb Christian Rößner <cr@xxxxxxx>: > If nDP would be useable, I would detect packets and mark them and afterwards using CONNMARK for the whole connection. That would be probably the best solution. So if you have further details on that, I really would appreciate it :) I can not get nDPI compiled under Debian wheezy: NDPI_PATH=/usr/local/src/DPI/nDPI make if test -d ndpi_cpy; then \ cp /usr/local/src/DPI/nDPI/src/* ndpi_cpy -R; \ else \ mkdir ndpi_cpy; \ cp /usr/local/src/DPI/nDPI/src/* ndpi_cpy -R; \ fi make -C /lib/modules/3.2.0-4-amd64/build M=$PWD; make[1]: Entering directory `/usr/src/linux-headers-3.2.0-4-amd64' CC [M] /usr/local/src/DPI/ndpi-netfilter/src/main.o /usr/local/src/DPI/ndpi-netfilter/src/main.c: In function ‘ndpi_mt_check’: /usr/local/src/DPI/ndpi-netfilter/src/main.c:586:2: error: implicit declaration of function ‘NDPI_BITMASK_IS_ZERO’ [-Werror=implicit-function-declaration] /usr/local/src/DPI/ndpi-netfilter/src/main.c: In function ‘ndpi_mt_init’: /usr/local/src/DPI/ndpi-netfilter/src/main.c:681:54: warning: passing argument 3 of ‘ndpi_init_detection_module’ from incompatible pointer type [enabled by default] /usr/local/src/DPI/ndpi-netfilter/src/ndpi_cpy/include/ndpi_public_functions.h:150:40: note: expected ‘void (*)(void *)’ but argument is of type ‘void (*)(u32, void *, enum ndpi_log_level_t, const char *)’ /usr/local/src/DPI/ndpi-netfilter/src/main.c:681:54: error: too few arguments to function ‘ndpi_init_detection_module’ /usr/local/src/DPI/ndpi-netfilter/src/ndpi_cpy/include/ndpi_public_functions.h:150:40: note: declared here cc1: some warnings being treated as errors make[4]: *** [/usr/local/src/DPI/ndpi-netfilter/src/main.o] Error 1 make[3]: *** [_module_/usr/local/src/DPI/ndpi-netfilter/src] Error 2 make[2]: *** [sub-make] Error 2 make[1]: *** [all] Error 2 make[1]: Leaving directory `/usr/src/linux-headers-3.2.0-4-amd64' make: *** [all] Error 2 Google does not help. So I stay with the u32 solution for now. Back to my main question: What should nexthdr+X look like to do the same as „at 28“? Thanks in advance -Christian Rößner -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
Attachment:
signature.asc
Description: Message signed with OpenPGP using GPGMail