Hi,

is there a full diagram of the whole path of the PACKET trought the linux-kernel
i.e something like this :
http://netfilter.samba.org/unreliable-guides/packet-filtering-HOWTO/packet-fi...

but including the all the stuff that got touched from "ip(route)", 
"iptables", "tc" and the desicion making for choosing the
correct path .... If there is someone to explain it I will draw it if nececary
:")

raptor@unacs.bg

On Monday 22 July 2002 21:41, raptor@unacs.bg wrote:
> Hi,
>
> is there a full diagram of the whole path of the PACKET trought the
> linux-kernel i.e something like this :
> http://netfilter.samba.org/unreliable-guides/packet-filtering-HOWTO/pac=
ket-
>filtering-HOWTO.linuxdoc-6.html
>
> but including the all the stuff that got touched from
"ip(route)",=20
> "iptables", "tc" and the desicion making for choosing
the correct path =
=2E...
> If there is someone to explain it I will draw it if nececary :")
I have a drawing that was posted once on this list.  You can find it on=20
www.docum.org under KPTD.  Plz feel free to send me updates.

Stef

--=20

stef.coene@docum.org
 "Using Linux as bandwidth manager"
     http://www.docum.org/
     #lartc @ irc.openprojects.net

This is a multi-part message in MIME format.

--Multipart_Tue__23_Jul_2002_21:27:15_+0300_08294fd0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit




|
|I have a drawing that was posted once on this list.  You can find it on
|www.docum.org under KPTD.  Plz feel free to send me updates.

OK. I've made the diagram in Dia (attached). U can easly export it in any format
(any linux distro have Dia, i think)...

I made some changes may be they are wrong, pls correct me... I thought that all
"mangle" and "nat" stuff should be "IPTABLES", and
all "ipchains" suff should go away !!  ?

- What is "mark-rewrite" ?!
- there is something which have to be added somewhere around
"forwarding", can't figure out what/where ?! Pls do it, or tell me i
wil do it?
- in my opinion (6a.3) output-routing should go at the place of (7) !!! 'm I
right ?

raptor@unacs.bg
--Multipart_Tue__23_Jul_2002_21:27:15_+0300_08294fd0
Content-Type: application/octet-stream;
 name="24net.dia"
Content-Disposition: attachment;
 filename="24net.dia"
Content-Transfer-Encoding: base64
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--Multipart_Tue__23_Jul_2002_21:27:15_+0300_08294fd0--

On Tuesday 23 July 2002 20:27, raptor@unacs.bg wrote:
> |I have a drawing that was posted once on this list.  You can find it o=
n
> |www.docum.org under KPTD.  Plz feel free to send me updates.
>
> OK. I've made the diagram in Dia (attached). U can easly export it in a=
ny
> format (any linux distro have Dia, i think)...
>
> I made some changes may be they are wrong, pls correct me... I thought =
that
> all "mangle" and "nat" stuff should be
"IPTABLES", and all "ipchains" s=
uff
> should go away !!  ?
Ipchains is still available in the 2.4 kernel.

> - What is "mark-rewrite" ?!
Don't know.

> - there is something which have to be added somewhere around
"forwardin=
g",
> can't figure out what/where ?! Pls do it, or tell me i wil do it? - in =
my
> opinion (6a.3) output-routing should go at the place of (7) !!! 'm I ri=
ght
> ?

Stef

--=20

stef.coene@docum.org
 "Using Linux as bandwidth manager"
     http://www.docum.org/
     #lartc @ irc.openprojects.net

|> I made some changes may be they are wrong, pls correct me... I thought
that
|> all "mangle" and "nat" stuff should be
"IPTABLES", and all "ipchains" suff
|> should go away !!  ?
|Ipchains is still available in the 2.4 kernel.
]- Yes but it is just module that runs on top of iptables, afaik ? i.e. it uses
iptables infrastructure

raptor@unacs.bg

On Tuesday 23 July 2002 21:29, raptor@unacs.bg wrote:
> |> I made some changes may be they are wrong, pls correct me... I thoug=
ht
> |> that all "mangle" and "nat" stuff should be
"IPTABLES", and all
> |> "ipchains" suff should go away !!  ?
> |
> |Ipchains is still available in the 2.4 kernel.
>
> ]- Yes but it is just module that runs on top of iptables, afaik ? i.e.=
 it
> uses iptables infrastructure
Mhh.  I'm not a kernel specialist, but I thought there was still some=20
ipchains code in the 2.4 kernel.

Staf
=20
--=20

stef.coene@docum.org
 "Using Linux as bandwidth manager"
     http://www.docum.org/
     #lartc @ irc.openprojects.net

Hello!

I have made one diagram for the IPv6 stack if that interests anybody, for
download at:

www.sics.se/~gabriel/funccalls.pdf

The Netfilter hooks are marked out as well, on this diagram.

Cheers!

/gabriel


On Mon, 22 Jul 2002 raptor@unacs.bg wrote:

>
>
>
> Hi,
>
> is there a full diagram of the whole path of the PACKET trought the
linux-kernel i.e something like this :
>
http://netfilter.samba.org/unreliable-guides/packet-filtering-HOWTO/packet-fi...
>
> but including the all the stuff that got touched from
"ip(route)",  "iptables", "tc" and the desicion
making for choosing the correct path .... If there is someone to explain it I
will draw it if nececary :")
>
> raptor@unacs.bg
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
>