Results 1 to 4 of 4
Thread: netfilter questions
|
Enjoy an ad free experience by logging in. Not a member yet? Register.
|
|
-
12-14-2004 #1
- Join Date
- Nov 2004
- Posts
- 20
netfilter questions
the packet analysis and rules etc.,
I am aware that this could be accomplished using netfilter.
But, I have the following questions:
1. Does netfilter has any platform dependencies or any distro dervied from 2.4 and 2.6 versions will work
?
2. Does netfilter operate in the kernel space or in the user space ?
2a) If netfilter operates in the kernel space, how best could be packet info be pushed into a user-space
program ?
3) Are there any kernel level alternatives to netfilter ?
Please enlighten me with whatever answers you may have.
Rich.
-
12-14-2004 #2
Netfilter is kernel-level. AFAIK, there is no way to "push it into userspace". You define rules and all packets are fed through these rules. I'm not aware of any way to write iptables rules based on anything other than what you can do with iptables (which is quite a lot!). Check out netfilter.org for some very thorough documentation on using iptables.
"Time is an illusion. Lunchtime, doubly so."
~Douglas Adams, The Hitchhiker's Guide to the Galaxy
-
12-14-2004 #3
- Join Date
- Nov 2004
- Posts
- 20
Thanks for the info-
Can netfilter capture "All" packets irrespective of the protocol ?
-
12-14-2004 #4