I googled and understood that "If we DROP a packet at BROUTER chain , it will be passed to upper layer and netfilter subsystem will process those packets . What will happen, if we drop a packet at PREROUTING chain of ebtables ?
On Wednesday 2010-08-04 13:05, ratheesh k wrote:>I googled and understood that "If we DROP a packet at BROUTER chain >, it will be passed to upper layer and netfilter subsystem will >process those packets . > >What will happen, if we drop a packet at PREROUTING chain of ebtables ?Depends on the table you are referring to.
Le 04/08/2010 13:05, ratheesh k a ?crit :> I googled and understood that "If we DROP a packet at BROUTER chain > , it will be passed to upper layer and netfilter subsystem will > process those packets . > > What will happen, if we drop a packet at PREROUTING chain of ebtables ?Did you read http://ebtables.sourceforge.net/br_fw_ia/br_fw_ia.html and http://ebtables.sourceforge.net/br_fw_ia/PacketFlow.png ? Nicolas.
--On 4 August 2010 13:49:28 +0200 Nicolas de Peslo?an <nicolas.2p.debian at free.fr> wrote:> Did you read http://ebtables.sourceforge.net/br_fw_ia/br_fw_ia.html and > http://ebtables.sourceforge.net/br_fw_ia/PacketFlow.png ?A useful improvement to those would be documenting where libpcap (which does both input and, less well known, output) samples/injects packets. I /think/ sampling is right on the left and injection right on the right. -- Alex Bligh
On Wednesday 2010-08-04 14:31, Alex Bligh wrote:> >> Did you read http://ebtables.sourceforge.net/br_fw_ia/br_fw_ia.html and >> http://ebtables.sourceforge.net/br_fw_ia/PacketFlow.png ? > > A useful improvement to those would be documenting where libpcap > (which does both input and, less well known, output) samples/injects > packets. I /think/ sampling is right on the left and injection right > on the right.pcap grabbing and injection is completely outside any of the graphs currently floating around.
On Wed, Aug 4, 2010 at 5:13 PM, Jan Engelhardt <jengelh at medozas.de> wrote:> On Wednesday 2010-08-04 13:05, ratheesh k wrote: > >>I ?googled and ?understood that "If we ?DROP a packet at BROUTER chain >>, it will be passed to upper layer ?and netfilter subsystem will >>process those packets . >> >>What will happen, ?if we drop a packet at PREROUTING chain ?of ebtables ? > > Depends on the table you are referring to. >Ok . Could you please answer below question . i got little confused here . This answer may solve some confusion . What is the difference between droppin a Pkt in Brouting chain of Broute table and Drop a Pkt in nat prerouing chain of ebtables . Or are they having same effect ? .