Hello, I have created an app that is now using netfilter_queue to get packets from iptables (the app used ipqueue previously). The first instance of the app installs an OUTPUT chain rule like: target prot opt source destination NFQUEUE all -- anywhere BASE-ADDRESS.MCAST.NET/4 NFQUEUE num 1 and it receives the packets fine and sets an NF_ACCEPT verdict and the packets go merrily along their way ... BUT, when I launch a second instance of the app which installs the same rule but with a _different_ --queue-num,: arget prot opt source destination NFQUEUE all -- anywhere BASE-ADDRESS.MCAST.NET/4 NFQUEUE num 2 The second instance doesn't see any packets _until_ the first instance of the app exits. However, if I set up each app to filter for a different set of destination addresses, then each instance does receive its exclusive matching packet sets. Is this just a limitation of how iptables works or is there something additional I need to do so that two different process can each get the same packets? Brian Adamson brian.adamson@xxxxxxxxxxxx -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
