Re: Working example for NETLINK_FIREWALL protocol

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This works.

Thanks a lot. To increase my knowledge, can you tell, why this was not
working with ip_queue module loaded.



On Fri, Oct 7, 2011 at 3:56 PM, Nikolay S. <nowhere@xxxxxxxxxxxxxxxx> wrote:
> В Птн, 07/10/2011 в 15:55 +0530, Prashant Batra пишет:
>> cat /proc/net/netfilter/nf_queue
>>  0 NONE
>>  1 NONE
>>  2 ip_queue
>>  3 NONE
>>  4 NONE
>>  5 NONE
>>  6 NONE
>>  7 NONE
>>  8 NONE
>>  9 NONE
>> 10 NONE
>> 11 NONE
>> 12 NONE
>>
>
> Can you please unload ip_queue module and run the sample one more time?
>
>>
>> On Fri, Oct 7, 2011 at 3:30 PM, Nikolay S. <nowhere@xxxxxxxxxxxxxxxx> wrote:
>> > В Птн, 07/10/2011 в 12:20 +0530, Prashant Batra пишет:
>> >> perror gives : Invalid argument (errno 22)
>> >
>> > Could you please
>> > cat /proc/net/netfilter/nf_queue
>> > ?
>> >
>> >>
>> >> On Fri, Oct 7, 2011 at 12:14 PM, Nikolay S. <nowhere@xxxxxxxxxxxxxxxx> wrote:
>> >> > В Птн, 07/10/2011 в 11:55 +0530, Prashant Batra пишет:
>> >> >> On Fri, Oct 7, 2011 at 10:39 AM, Nikolay S. <nowhere@xxxxxxxxxxxxxxxx> wrote:
>> >> >> > В Птн, 07/10/2011 в 10:29 +0530, Prashant Batra пишет:
>> >> >> >> Hello,
>> >> >> >>
>> >> >> >> Can anyone help me out with a working code sample for receiving
>> >> >> >> filtered packets using NETLINK_FIREWALL protocol in the user space.
>> >> >> >> I have tried out the things in "http://smacked.org/docs/netlink.pdf";
>> >> >> >> But these are not working.
>> >> >> >>
>> >> >> >> Any help would be highly appreciated.
>> >> >> >
>> >> >> > Hi, ip_queue is considered deprecated.
>> >> >> > Try this instead
>> >> >> > http://www.netfilter.org/projects/libnetfilter_queue/index.html
>> >> >> >
>> >> >> Thanks Nikolay, I have installed libnetfilter_queue.
>> >> >> But now when I am trying to run the sameple provided "nfqnl_test.c" it
>> >> >> is failing at trying to unbind AF_INET moudule "unbinding existing
>> >> >> nf_queue handler for AF_INET".
>> >> >> My kernel is 2.6.38 and the lsmod looks like this -
>> >> >>
>> >> >> Module                  Size  Used by
>> >> >> nfnetlink_queue        17273  0
>> >> >> nfnetlink              12786  1 nfnetlink_queue
>> >> >> ip_queue               12869  0
>> >> >> hmac                   12649  0
>> >> >> nfs                   281445  2
>> >> >> nfsd                  246977  8
>> >> >> lockd                  70662  2 nfs,nfsd
>> >> >> nfs_acl                12501  2 nfs,nfsd
>> >> >> auth_rpcgss            36685  2 nfs,nfsd
>> >> >> sunrpc                174292  19 nfs,nfsd,lockd,nfs_acl,auth_rpcgss
>> >> >> exportfs               12603  1 nfsd
>> >> >> autofs4                27554  2
>> >> >> af_packet              26084  2
>> >> >> pcspkr                 12515  0
>> >> >> igb                   101765  0
>> >> >> ixgbe                 125623  0
>> >> >> mdio                   12552  1 ixgbe
>> >> >> bnx2                   72220  0
>> >> >> i2c_i801               17021  0
>> >> >> i2c_core               23154  1 i2c_i801
>> >> >> pata_acpi              12664  0
>> >> >> ata_generic            12469  0
>> >> >> sr_mod                 21697  0
>> >> >> cdrom                  40849  1 sr_mod
>> >> >> iTCO_wdt               17018  0
>> >> >> joydev                 17402  0
>> >> >> usb_storage            35510  0
>> >> >> usb_libusual           16728  1 usb_storage
>> >> >> option                 20689  0
>> >> >> usb_wwan               17188  1 option
>> >> >> usbserial              31523  2 option,usb_wwan
>> >> >> usbhid                 26894  0
>> >> >> ehci_hcd               44245  0
>> >> >> uhci_hcd               27054  0
>> >> >> usbcore               117975  9
>> >> >> usb_storage,usb_libusual,option,usb_wwan,usbserial,usbhid,ehci_hcd,uhci_hcd
>> >> >> dm_mod                 67615  0
>> >> >> sctp                  178747  6
>> >> >> crc32c                 12630  1
>> >> >> libcrc32c              12394  1 sctp
>> >> >> ext3                  124843  1
>> >> >> jbd                    45806  1 ext3
>> >> >> mbcache                12890  1 ext3
>> >> >> unix                   26736  27
>> >> >> aacraid                70536  0
>> >> >> ata_piix               25526  2
>> >> >> libata                163811  3 pata_acpi,ata_generic,ata_piix
>> >> >> sd_mod                 34830  3
>> >> >> cciss                  99716  0
>> >> >> aic7xxx               120611  0
>> >> >> megaraid_sas           71987  0
>> >> >> megaraid_mbox          35020  0
>> >> >> megaraid_mm            17163  1 megaraid_mbox
>> >> >> mptsas                 48651  0
>> >> >> scsi_transport_sas     24478  1 mptsas
>> >> >> mptspi                 17848  0
>> >> >> scsi_transport_spi     23215  2 aic7xxx,mptspi
>> >> >> mptscsih               26812  2 mptsas,mptspi
>> >> >> mptbase                65266  3 mptsas,mptspi,mptscsih
>> >> >> scsi_mod              135240  14
>> >> >> sr_mod,usb_storage,aacraid,libata,sd_mod,cciss,aic7xxx,megaraid_sas,megaraid_mbox,mptsas,scsi_transport_sas
>> >> >> ,mptspi,scsi_transport_spi,mptscsih
>> >> >>
>> >> >> Could you please point out the problem.
>> >> >
>> >> > What is the errno value?
>> >> > You can use perror() to see helpful error message
>> >> >
>> >> >
>> >> >>
>> >> >>
>> >> >> > There are also several useful examples
>> >> >> > http://www.netfilter.org/projects/libnetfilter_queue/doxygen/modules.html
>> >> >> >
>> >> >> >
>> >> >> >> -- Thanks
>> >> >> >> Prashant Batra
>> >> >> >> --
>> >> >> >> To unsubscribe from this list: send the line "unsubscribe netfilter" in
>> >> >> >> the body of a message to majordomo@xxxxxxxxxxxxxxx
>> >> >> >> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>> >> >> >
>> >> >> >
>> >> >> >
>> >> >>
>> >> >>
>> >> >>
>> >> >
>> >> >
>> >> >
>> >>
>> >>
>> >>
>> >> --
>> >> Prashant Batra
>> >> Follow the dreams!!
>> >> NrybXǧv^)޺{.n+z׫{ay ʇڙ,j fhz w j:+vwjm zZ+ݢj"!
>> >
>> >
>> >
>>
>>
>>
>
>
>



-- 
Prashant Batra
Follow the dreams!!
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux