Will someone please write a program that can be used to assist with u32
matches?
What I envision is something like ipchains'' "--check" option,
which
tests a packet against the selected chain. tcfilter should check
against the loaded filters.
It would be REALLY nice if:
1) counters (showing the number of hits (in packets)) could be included.
2) a debug mode showing what the packet header looks like, with options
for hex or decimal - somewhat like an ASM DEBUG dump. This would show
the packet being tested and, for each u32 entry, the decision to match
or not...
3) the ability to test a packet against a single u32 entry.
4) a "trace" that would, where more than one filter matches, show
which
one was used.
Another nice feature would be the ability to check for a fwmark.
I can''t pay for this, but perhaps I have something other than cash that
you want?
gypsy
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/