Re: iptables u32 tests and user logging

[Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>]

On 07/21/08 13:06, Padmanabhan wrote:
> Is there way we can add code to u32 to do this function ,, after 
> matching a criteria,  print/ log interested bytes?

Rather than having u32 do the logging, you could use u32 to create 
multiple different rules (one per ITT you want to log) and then use a 
generic LOG target to do the logging for you.  I.e.

Does ITT match "A", log "bla, bla, A, bla..."
Does ITT match "B", log "bla, bla, B, bla..."
Does ITT match "C", log "bla, bla, C, bla..."

You may want to make this a sub chain that is jumped to after matching 
the common portion of the IPTables rule.



Grant. . . .
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html