Re: Possible nftables U32 equivalent to read packet's data contents

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Raul,

On Fri, Sep 01, 2017 at 04:39:35PM +0000, Raul Martinez wrote:
> Hi Pablo,
> 
> Ultimately my use would be to read the first byte of a ESP IP 
> packet's data payload. So IP layer is where I would want the 
> expression to work in.
> 
> The packets I am working with are identical and need to be 
> routed to one of two interfaces based on if the first byte of 
> the data contents is non-zero. 

OK, so it's just an arbitrary byte. Not anything in a standard header
that needs to be matched.

I'm asking because we could add the protocol definition for what you
need, so we don't need to use raw expressions.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux