Re: iptables u32 tests and user logging

[Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>]

On 07/21/08 15:15, Padmanabhan wrote:
> My interested 4 bytes can have value between all 0's to all FF's... 
> that's the reason that without matching it for a specific value,

*nod*  That makes things a little bit more difficult, but not impossible.

> I want to record those values.. without using any capturing programs 
> like tcpdump/wireshark.. u32 provided me flexibility to look for only 
> specific bytes...but the action which I would like perform is not 
> currently supported ....

Do you want to capture all packets in a connection or just one per 
connection?  If you want one per connection, you might want to match in 
the NAT table, which only sees the first packet in a connection.

> I have another story after recording these values :-)

*nod*

I'm always curious, probably to a fault.



Grant. . . .
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html