[prev in list] [next in list] [prev in thread] [next in thread]
List: netfilter-devel
Subject: [olivetti@terra.com.br: Question about iptables implementation]
From: Harald Welte <laforge () gnumonks ! org>
Date: 2001-08-27 7:49:49
[Download RAW message or body]
can somebody please tell him abuot ip_queue?
thanks.
--
Live long and prosper
- Harald Welte / laforge@gnumonks.org http://www.gnumonks.org
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M-
V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*)
[Attachment #3 (message/rfc822)]
This is a multi-part message in MIME format.
Hi,
I'm developing a NIDS in a university project, and have a doubt in how to drop packets like this:
sock = socket(PF_PACKET,SOCK_RAW,htons(0x0800));
...sniff packet and analyse it...
if packet is dangerous, drop it
How can that be done????
Thanks,
Fabricio Olivetti de França
[Attachment #6 (text/html)]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 5.50.4134.100" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I'm developing a NIDS in a university project, and
have a doubt in how to drop packets like this:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>sock =
socket(PF_PACKET,SOCK_RAW,htons(0x0800));</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>...sniff packet and analyse it...</FONT></DIV>
<DIV><FONT face=Arial size=2>if packet is dangerous, drop it</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>How can that be done????</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks,</FONT></DIV>
<DIV><FONT face=Arial size=2>Fabricio Olivetti de
França</FONT></DIV></BODY></HTML>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic