Re: netfilter hook questions

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi
the problem is that with a active RTP flow arriving to the box (tcpdump
can see it) my function doesn't get any packet.

however, when the same box that is capturing also participates in the
RTP flow, it's received correctly in the hook.

so, why is not working the promiscuous mode? i'm missing something?
I am just adding another "suspect" here. The tcpdump (which is using libpcap) might be operating at layer 2 (data link?), while netfilter operates in layer 3. Since this is just "sniffing", layer 2 of Linux network stack quickly revealed that this packet is not actually for your machine, so it it dropped.

Maybe, you can observe the code from program like Dug Song's dsniff and see how it did the monitoring or even packet interception.

regards,

Mulyadi


--
To unsubscribe from this list: send an email with
"unsubscribe kernelnewbies" to ecartis@xxxxxxxxxxxx
Please read the FAQ at http://kernelnewbies.org/FAQ


[Index of Archives]     [Newbies FAQ]     [Linux Kernel Mentors]     [Linux Kernel Development]     [IETF Annouce]     [Git]     [Networking]     [Security]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux SCSI]     [Linux ACPI]
  Powered by Linux