search for: lnetfilter_queue

http://bugzilla.netfilter.org/show_bug.cgi?id=743 Summary: Errors in compiling nfqnl_test.c Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: Ubuntu Status: NEW Severity: enhancement Priority: P5 Component: netfilter hooks AssignedTo: netfilter-buglog at lists.netfilter.org

...d large ICMP packets. First I thought it was something in my packet processor implementation, but the example code from netfilter.org reproduces the issue I faced. http://netfilter.org/projects/libnetfilter_queue/doxygen/nfqnl__test_8c_source.html Compiled with: $ gcc nfqnl_test.c -o nfqnl_test -lnetfilter_queue Test setup: # iptables -F # iptables -I INPUT -j NFQUEUE --queue-num 1 # ./nfqnl_test So far everything is ok. I can see packets flowing via the queue. First a working large ICMP packet: $ ping -c 4 -s 3980 localhost PING localhost.localdomain (127.0.0.1) 3980(4008) bytes of data. 3988 bytes f...

...ask, i will post further details. Lets say accompanying iptables rules are following : $iptables -t mangle -A PREROUTING -p udp --dport 5000 -j NFQUEUE $iptables -t mangle -A OUTPUT -p udp --sport 5000 -j NFQUEUE lets compile and fire udp the thing. $gcc -g3 nfq_test.c -lnfnetlink -lnetfilter_queue $./a.out (should be as root) now we can feed garbage udp payload to this thing by netcat both client and server mode $nc -ul 5000 $nc -uvv <IP> 5000 This will print the packet from my netfilter_queue app in stdout. Now that the development environment is set up, we can move to...