Re: Mark packets/Transfer data from iptables to QUEUE

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Levi

On Sun, May 23, 2010 at 12:22 PM, Mistick Levi <gmistick@xxxxxxxxx> wrote:
> Hi,
> I'm using libnetfilter_queue, and i would like to treat packets from
> different rules differently, in the same queue.
> Example:
> rulematch: ipsrc: 123.132.123.232 ipdst = 1.2.3.4 udp port-12321 -J
> NFQUEUE --queue-num 2  - "DANPACKET"
> rulematch ipsrc: 123.132.123.232 ipdst = 1.2.3.4 udp port-12221 -J
> NFQUEUE --queue-num 2   - "LaneyPacket"
>
> And when this messages get to userspace application, i want to be able
> to extract the comment and treat each packet by a different method...
> Any idea's?

You can set a different mark on the packets belonging to each stream
using iptables -j MARK --set-mark, and then call different method in
userspace based on the value of mark on the received packet

Regards
Ajay

>
> Kind regards
> Levi Yechiel
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@xxxxxxxxxxxxxxx
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux