This is a multi-part message in MIME format.
------=_NextPart_000_0021_01C29490.4E9A1F00
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hello,
i have 2 questions, about which i'm not sure if they work like i think =
they do.
1. I wanna write a small module which does some checks on packets in =
NF_IP_LOCAL_IN, NF_IP_LOCAL_OUT and maintains a connection-table. I =
would like to know if it's ok to do that in 1 Module (and 1 function), =
or should that be done for any reason in seperate modules?
static int __init init(void) {
return nf_register_hook(&first);
return nf_register_hook(&second);
}
static struct nf_hook_ops first
=3D { { NULL, NULL }, example_hook, PF_INET, =
NF_IP_LOCAL_IN, NF_IP_PRI_FILTER-1 };
static struct nf_hook_ops first
=3D { { NULL, NULL }, example_hook, PF_INET, =
NF_IP_LOCAL_OUT, NF_IP_PRI_FILTER-1 };
example_hook(unsigned int hook, struct sk_buff **skb,
const struct net_device *indev, const
struct net_device *outdev, int
(*okfn)(struct sk_buff *))
{
..
}
2. I wanna look at tunneled packets in LOCAL_IN after they got =
decapsulated, can i see that by looking at the "const struct net_device =
*indev" which should be the tunlX device?
Regards,=20
Nikos
------=_NextPart_000_0021_01C29490.4E9A1F00
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Hello,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>i have 2 questions, about which i'm not =
sure=20
if they work like i think they do.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>1. I wanna write a small module =
which does=20
some checks on packets in NF_IP_LOCAL_IN, NF_IP_LOCAL_OUT and maintains =
a=20
connection-table. I would like to know if it's ok to do that in 1 Module =
(and 1=20
function), or should that be done for any reason in seperate=20
modules?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2> static int __init=20
init(void) {<BR> &nbs=
p; =20
return nf_register_hook(&first);</FONT></DIV>
<DIV><FONT face=3DArial size=3D2> =20
return=20
nf_register_hook(&second);<BR> =20
}<BR></FONT></DIV>
<DIV><FONT face=3DArial size=3D2>static struct=20
nf_hook_ops first<BR>  =
; =20
=3D { { NULL, NULL }, example_hook, PF_INET, NF_IP_LOCAL_IN, =
NF_IP_PRI_FILTER-1=20
};<BR>static struct=20
nf_hook_ops first<BR>  =
; =20
=3D { { NULL, NULL }, example_hook, PF_INET, NF_IP_LOCAL_OUT, =
NF_IP_PRI_FILTER-1=20
};<BR></FONT></DIV>
<DIV><FONT face=3DArial size=3D2>example_hook(unsigned int hook, struct =
sk_buff=20
**skb,<BR> &nb=
sp; &nbs=
p; =20
const struct net_device *indev,=20
const<BR> &nbs=
p;  =
; =20
struct net_device *outdev,=20
int<BR> =
&=
nbsp; =20
(*okfn)(struct sk_buff *))</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>{</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>..</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>}<BR></DIV>
<DIV></FONT><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>2. I wanna look at tunneled =
packets in=20
LOCAL_IN after they got decapsulated, can i see that by looking at the =
"const=20
struct net_device *indev" which should be the tunlX device?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Regards, </FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Nikos</FONT></DIV></BODY></HTML>
------=_NextPart_000_0021_01C29490.4E9A1F00--
