全部博文(230)
| 标题 | 阅读 | 评论 | 转发 | 发布日期 | |
|---|---|---|---|---|---|
| 什么是白皮书,蓝皮书,绿皮书,红皮书 | 2733 | 0 | 0 | 2007-06-30 | |
| RFC1025 - TCP AND IP BAKE OFF | 3046 | 0 | 0 | 2007-06-28 | |
| 直升机能做翻滚吗? | 3192 | 0 | 0 | 2007-06-24 | |
| http://www.quest.i-poon.com | 4114 | 2 | 0 | 2007-06-13 | |
| iptables 里 recent 模块的用法 | 3950 | 0 | 1 | 2007-06-10 | |
| 存储入门:光纤网卡和 HBA 卡的区别 | 3447 | 0 | 0 | 2007-06-10 | |
| 关于 date 命令的用法(总忘!) | 3006 | 1 | 1 | 2007-06-10 | |
| Creating a shared and static library [gcc] | 3369 | 0 | 0 | 2007-06-08 | |
| Linux内核中FTP跟踪中的序列号处理漏洞 | 2164 | 0 | 0 | 2007-06-07 | |
| About getopt | 1926 | 0 | 0 | 2007-06-06 | |
| WebFilter - ExeBlock (cut from ISA SDK) | 1682 | 0 | 0 | 2007-06-06 | |
| CHANGING THE NORMAL ROOT FILE SYSTEM | 2069 | 0 | 0 | 2007-06-03 | |
| FastNAT | 2536 | 0 | 0 | 2007-06-02 | |
| Double Play Packet | 1135 | 0 | 0 | 2007-06-02 | |
| Multiple Routes to Same Destination | 1480 | 0 | 0 | 2007-06-02 | |
| tc filter about u32 | 3682 | 0 | 0 | 2007-06-02 |
phoenixcsl2015-05-26 09:57
hi,platinum,请问netfilter能够过滤arp的东西吗?我写了一些代码,在NF_ARP_IN和OUT捕获一些信息,但是为什么什么都抓不到?
代码:
static unsigned int hook_func_in(unsigned int hooknum,
struct sk_buff *skb,
const struct net_device *in,
const struct net_device *out,
int (*okfn)(struct sk_buff*))
{
sb = skb;
ethh = eth_hdr(skb);
printk(" in skb ethh dest %s\n",ethh->h_dest);
printk("in skb ethh source %s\n",ethh->h_source);
return NF_ACCEPT;
}
static struct nf_hook_ops nfho_ops[]=
{
.hook = hook_func_in,
.owner = THIS_MODULE,
.pf =NF_ARP,
.hooknum = NF_ARP_IN,
.priority = NF_IP_PRI_FIRST,
}
static struct nf_hook_ops nfho_ops[]=
{
.hook = hook_func_in,
.owner = THIS_MODULE,
.pf =NF_ARP,
.hooknum = NF_ARP_IN,
.priority = NF_IP_PRI_FIRST,
}