One of the easiest ways to get copies of sk_buff's without modifying any kernel source would be to write a module that registers with netfilter. That way you get to look at every packet and/or clone them and pass them to userspace. I have no idea about the efficiency of such a task though. But, you could write this module in about 2 pages of source code (including comments).` J On Mon, 2003-05-05 at 03:55, Felix Radensky wrote: > Hi, folks > > Is there a way of accessing sk_buffs from userspace, e.g. > mapping sk_buff memory from process ? > > We have an application that has to inspect first packet of > each connection and kernel module that intercepts sk_buffs. > Having direct access to sk_buffs from userspace should be > a great speed improvement. > > Thanks for your help. > > Felix. > > - > : send the line "unsubscribe linux-net" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html