Re: iptables u32 tests and user logging

[Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>]

On 07/21/08 02:51, Jan Engelhardt wrote:
> and the same tests with byte 16-19, checking for example, 0x1337 as 
> ITT. Note that this matches one specific ITT value only. If you want 
> to log all ITTs, then you should omit the ITT test and only test for 
> iSCSI, and log that using your favorite method.

Is there a way to log the data extracted from the matched packet with 
out passing the packet to user space for logging?  Or are you matching 
the desired packets and sending them user space for logging?

In other words is there a way to have IPTables read some contents of a 
packet and then LOG the contents with out passing the entire packet to 
user space?  (To the best of my knowledge there is no way to do this.)



Grant. . . .
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html