Re: Working example for NETLINK_FIREWALL protocol

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



В Птн, 07/10/2011 в 16:04 +0530, Prashant Batra пишет:
> This works.
> 
> Thanks a lot. To increase my knowledge, can you tell, why this was not
> working with ip_queue module loaded.

nf_queue is a generalization of ip_queue. So they basically do the same
thing for AF_INET packets, and they can not both handle packets at the
same time.
In kernel, unbinding is only possible for the same AF and same handler
type, so nf_queue unbind can do nothing with ip_queue bind.

> 
> On Fri, Oct 7, 2011 at 3:56 PM, Nikolay S. <nowhere@xxxxxxxxxxxxxxxx> wrote:
> > В Птн, 07/10/2011 в 15:55 +0530, Prashant Batra пишет:
> >> cat /proc/net/netfilter/nf_queue
> >>  0 NONE
> >>  1 NONE
> >>  2 ip_queue
> >>  3 NONE
> >>  4 NONE
> >>  5 NONE
> >>  6 NONE
> >>  7 NONE
> >>  8 NONE
> >>  9 NONE
> >> 10 NONE
> >> 11 NONE
> >> 12 NONE
> >>
> >
> > Can you please unload ip_queue module and run the sample one more time?
> >
> >>
> >> On Fri, Oct 7, 2011 at 3:30 PM, Nikolay S. <nowhere@xxxxxxxxxxxxxxxx> wrote:
> >> > В Птн, 07/10/2011 в 12:20 +0530, Prashant Batra пишет:
> >> >> perror gives : Invalid argument (errno 22)
> >> >
> >> > Could you please
> >> > cat /proc/net/netfilter/nf_queue
> >> > ?
> >> >
> >> >>
> >> >> On Fri, Oct 7, 2011 at 12:14 PM, Nikolay S. <nowhere@xxxxxxxxxxxxxxxx> wrote:
> >> >> > В Птн, 07/10/2011 в 11:55 +0530, Prashant Batra пишет:
> >> >> >> On Fri, Oct 7, 2011 at 10:39 AM, Nikolay S. <nowhere@xxxxxxxxxxxxxxxx> wrote:
> >> >> >> > В Птн, 07/10/2011 в 10:29 +0530, Prashant Batra пишет:
> >> >> >> >> Hello,
> >> >> >> >>
> >> >> >> >> Can anyone help me out with a working code sample for receiving
> >> >> >> >> filtered packets using NETLINK_FIREWALL protocol in the user space.
> >> >> >> >> I have tried out the things in "http://smacked.org/docs/netlink.pdf";
> >> >> >> >> But these are not working.
> >> >> >> >>
> >> >> >> >> Any help would be highly appreciated.
> >> >> >> >
> >> >> >> > Hi, ip_queue is considered deprecated.
> >> >> >> > Try this instead
> >> >> >> > http://www.netfilter.org/projects/libnetfilter_queue/index.html
> >> >> >> >
> >> >> >> Thanks Nikolay, I have installed libnetfilter_queue.
> >> >> >> But now when I am trying to run the sameple provided "nfqnl_test.c" it
> >> >> >> is failing at trying to unbind AF_INET moudule "unbinding existing
> >> >> >> nf_queue handler for AF_INET".
> >> >> >> My kernel is 2.6.38 and the lsmod looks like this -
> >> >> >>
> >> >> >> Module                  Size  Used by
> >> >> >> nfnetlink_queue        17273  0
> >> >> >> nfnetlink              12786  1 nfnetlink_queue
> >> >> >> ip_queue               12869  0
> >> >> >> hmac                   12649  0
> >> >> >> nfs                   281445  2
> >> >> >> nfsd                  246977  8
> >> >> >> lockd                  70662  2 nfs,nfsd
> >> >> >> nfs_acl                12501  2 nfs,nfsd
> >> >> >> auth_rpcgss            36685  2 nfs,nfsd
> >> >> >> sunrpc                174292  19 nfs,nfsd,lockd,nfs_acl,auth_rpcgss
> >> >> >> exportfs               12603  1 nfsd
> >> >> >> autofs4                27554  2
> >> >> >> af_packet              26084  2
> >> >> >> pcspkr                 12515  0
> >> >> >> igb                   101765  0
> >> >> >> ixgbe                 125623  0
> >> >> >> mdio                   12552  1 ixgbe
> >> >> >> bnx2                   72220  0
> >> >> >> i2c_i801               17021  0
> >> >> >> i2c_core               23154  1 i2c_i801
> >> >> >> pata_acpi              12664  0
> >> >> >> ata_generic            12469  0
> >> >> >> sr_mod                 21697  0
> >> >> >> cdrom                  40849  1 sr_mod
> >> >> >> iTCO_wdt               17018  0
> >> >> >> joydev                 17402  0
> >> >> >> usb_storage            35510  0
> >> >> >> usb_libusual           16728  1 usb_storage
> >> >> >> option                 20689  0
> >> >> >> usb_wwan               17188  1 option
> >> >> >> usbserial              31523  2 option,usb_wwan
> >> >> >> usbhid                 26894  0
> >> >> >> ehci_hcd               44245  0
> >> >> >> uhci_hcd               27054  0
> >> >> >> usbcore               117975  9
> >> >> >> usb_storage,usb_libusual,option,usb_wwan,usbserial,usbhid,ehci_hcd,uhci_hcd
> >> >> >> dm_mod                 67615  0
> >> >> >> sctp                  178747  6
> >> >> >> crc32c                 12630  1
> >> >> >> libcrc32c              12394  1 sctp
> >> >> >> ext3                  124843  1
> >> >> >> jbd                    45806  1 ext3
> >> >> >> mbcache                12890  1 ext3
> >> >> >> unix                   26736  27
> >> >> >> aacraid                70536  0
> >> >> >> ata_piix               25526  2
> >> >> >> libata                163811  3 pata_acpi,ata_generic,ata_piix
> >> >> >> sd_mod                 34830  3
> >> >> >> cciss                  99716  0
> >> >> >> aic7xxx               120611  0
> >> >> >> megaraid_sas           71987  0
> >> >> >> megaraid_mbox          35020  0
> >> >> >> megaraid_mm            17163  1 megaraid_mbox
> >> >> >> mptsas                 48651  0
> >> >> >> scsi_transport_sas     24478  1 mptsas
> >> >> >> mptspi                 17848  0
> >> >> >> scsi_transport_spi     23215  2 aic7xxx,mptspi
> >> >> >> mptscsih               26812  2 mptsas,mptspi
> >> >> >> mptbase                65266  3 mptsas,mptspi,mptscsih
> >> >> >> scsi_mod              135240  14
> >> >> >> sr_mod,usb_storage,aacraid,libata,sd_mod,cciss,aic7xxx,megaraid_sas,megaraid_mbox,mptsas,scsi_transport_sas
> >> >> >> ,mptspi,scsi_transport_spi,mptscsih
> >> >> >>
> >> >> >> Could you please point out the problem.
> >> >> >
> >> >> > What is the errno value?
> >> >> > You can use perror() to see helpful error message
> >> >> >
> >> >> >
> >> >> >>
> >> >> >>
> >> >> >> > There are also several useful examples
> >> >> >> > http://www.netfilter.org/projects/libnetfilter_queue/doxygen/modules.html
> >> >> >> >
> >> >> >> >
> >> >> >> >> -- Thanks
> >> >> >> >> Prashant Batra
> >> >> >> >> --
> >> >> >> >> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> >> >> >> >> the body of a message to majordomo@xxxxxxxxxxxxxxx
> >> >> >> >> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> >> >> >> >
> >> >> >> >
> >> >> >> >
> >> >> >>
> >> >> >>
> >> >> >>
> >> >> >
> >> >> >
> >> >> >
> >> >>
> >> >>
> >> >>
> >> >> --
> >> >> Prashant Batra
> >> >> Follow the dreams!!
> >> >> NrybXǧv^)޺{.n+z׫{ay ʇڙ,j fhz w j:+vwjm zZ+ݢj"!
> >> >
> >> >
> >> >
> >>
> >>
> >>
> >
> >
> >
> 
> 
> 


--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux