Hi, On Wed, 2015-04-15 at 11:21 +0000, Kees-Jan Hermans wrote: > Could someone please explain how the nfq_set_verdict function works? More specifically, what must be in the data_len and buf parameters - an IP packet (like the one you get out of nfq_get_payload())? Must it be the same pointer as you get out of nfq_get_payload or may it be different? The documentation is a bit terse on that. 0 and NULL are ok if you don't want to do packet modification. It you wanna modify packet then you pass the raw IP data and the length. Please note that if you set checksum to 0 they will be compute by the kernel. Please check: https://home.regit.org/netfilter-en/using-nfqueue-and-libnetfilter_queue/ BR, -- Eric Leblond <eric@xxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
