Re: netfilter hook questions

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, 24 Feb 2007, topi wrote:

hi,

i'm programming a kind of RTP connection tracker using netfilter hooks.

first i set the interface in promiscuous mode (i guess this is necessary
so i'm capturing in 'passive' mode) and later i register my
netfilter function in NF_IP_PRE_ROUTING.

  /* set promiscuity */
  dev_set_promiscuity(dev, 1);

  /* add hook to netfilter PRE_ROUTING chain */
  netfilter_ops.hook     = kvm_hook;
  netfilter_ops.owner    = THIS_MODULE;
  netfilter_ops.pf       = PF_INET;
  netfilter_ops.hooknum  = NF_IP_PRE_ROUTING;
  netfilter_ops.priority = NF_IP_PRI_FIRST;
  nf_register_hook(&netfilter_ops);

the problem is that with a active RTP flow arriving to the box (tcpdump
can see it) my function doesn't get any packet.

however, when the same box that is capturing also participates in the
RTP flow, it's received correctly in the hook.

so, why is not working the promiscuous mode? i'm missing something?

The netfilter hook is called after linux checks that the packet was indeed destined to the machine.


thanks in advance,

topi

--
To unsubscribe from this list: send an email with
"unsubscribe kernelnewbies" to ecartis@xxxxxxxxxxxx
Please read the FAQ at http://kernelnewbies.org/FAQ


--
To unsubscribe from this list: send an email with
"unsubscribe kernelnewbies" to ecartis@xxxxxxxxxxxx
Please read the FAQ at http://kernelnewbies.org/FAQ


[Index of Archives]     [Newbies FAQ]     [Linux Kernel Mentors]     [Linux Kernel Development]     [IETF Annouce]     [Git]     [Networking]     [Security]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux SCSI]     [Linux ACPI]
  Powered by Linux