I want to develop a driver that will capture "all" network packets and later allow/drop/steal based on
the packet analysis and rules etc.,
I am aware that this could be accomplished using netfilter.
But, I have the following questions:
1. Does netfilter has any platform dependencies or any distro dervied from 2.4 and 2.6 versions will work
2. Does netfilter operate in the kernel space or in the user space ?
2a) If netfilter operates in the kernel space, how best could be packet info be pushed into a user-space
3) Are there any kernel level alternatives to netfilter ?
Please enlighten me with whatever answers you may have.