Quoting Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>:
5. The example code you give includes a callback function. Can you write
a libnetfilter_queue program without a call back? It might be easier for
people without lots of c experience to modify and start doing things.
IIRC nfq_handle_packet uses that callback internally.
Are you saying that libnetfilter_queue can be used without using
nfq_create_queue. As far as I can tell (FYI I am a c novice), if you
use nfq_create_queue it must contain the a link to the address of the
callback function. All of the examples I can find do all the packet
processing within this callback function. If this is the case, I cannot
understand how you could keep ongoing statistics of packets or flows
via libnetfilter_queue without using a lot of globals.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html