Re: IP tracking

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Le sam 03/05/2003 à 20:56, Hannu Sehm a écrit :
> I need to track MAC and IP addresses of incoming traffic. And I need to
> forward these parameters to an other program for tracking issues. Can I do
> this with netfilter/iptables?

Spot packets in INPUT chain with mac match and source IP match. Then, if
you only need parameters, but no action on packet, you can use ULOG
target :

	http://gnumonks.org/projects/project_details?p_id=1

You can write your own "listener" and have it listen to ulog socket.

Or you can send packet to userland using QUEUE target, treat it with
your own application and maybe reinject it. You can find sample code at
:

	http://gnumonks.org/projects/project_details?p_id=3
	http://gnumonks.org/projects/project_details?p_id=2

-- 
Cédric Blancher  <blancher@xxxxxxxxxxxxxxxxxx>
IT systems and networks security - Cartel Sécurité
Phone : +33 (0)1 44 06 97 87 - Fax: +33 (0)1 44 06 97 99
PGP KeyID:157E98EE  FingerPrint:FA62226DA9E72FA8AECAA240008B480E157E98EE



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux