On 09/25/08 04:07, Benny Amorsen wrote:
That is exactly the problem. The network stack doesn't think it needs to do anything with the packets.
*nod*
If the kernel has to forward the packet, the performance advantages of using NFLOG probably disappear.
Eh...
I guess I'm sticking to libpcap then.
Consider looking at bridging and allowing IPTables to see bridged traffic. The traffic will end up being dropped or not forwarded because there is no destination on the other side. However in the process I think the traffic will pass through IPTables thus allowing you to do what you are wanting to do.
Grant. . . . -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
