Re: tcpdump and Iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



El jue, 02 de 09 de 2004 a las 20:07, Nick Drage escribiÃ:
> On Fri, Sep 03, 2004 at 01:56:33AM +0800, CC wrote:
> 
> > If I have iptables running and I do a tcpdump -i eth0,   at what point
> > is tcpdump listening to the connection?
> 
> tcpdump will see the packets before IPTables does anything to them.

If that's true (I don't doubt it) then I have a question:
Where in the routing process does tcpdump see the traffic?
It can be very important to know it for some studies.


-- 
Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@xxxxxxxxx
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÃA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux