Re: Hi again, get the process id associated to a packet

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

Le lundi 05 janvier 2009 à 01:43 +0100, ilninno a écrit :
> Hello again, im the insistent newbie :)
> 
> Im trying to get packet pid (process identifier) but netfilter and
> nfnetlink functions aren't very clear:
> 
> I saw a reference to packed pid in:
> 
>  struct nlmsghdr
> {
> 	__u32		nlmsg_len;	/* Length of message including header */
> 	__u16		nlmsg_type;	/* Message content */
> 	__u16		nlmsg_flags;	/* Additional flags */
> 	__u32		nlmsg_seq;	/* Sequence number */
> 	__u32		nlmsg_pid;	/* Sending process port ID */
> };

You won't find the process id information in the kernel to userspace
message. The list of available fields is available in the
(linux_)nfnetlink_queue.h file:

https://git.netfilter.org/cgi-bin/gitweb.cgi?p=libnetfilter_queue.git;a=blob;f=include/libnetfilter_queue/linux_nfnetlink_queue.h;h=191b094b4ae071dddefb50d04b2c08b6fcadd488;hb=HEAD#l35

By the way, you will find some libnetfilter_queue documentation here:
http://www.nufw.org/doc/libnetfilter_queue/

PS: for your privately send question (please avoid this), you can't bind
two programs to the same queue.

BR,
-- 
Eric Leblond <eric@xxxxxx>
INL: http://www.inl.fr/
NuFW: http://www.nufw.org/

Attachment: signature.asc
Description: Ceci est une partie de message =?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=


[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux