search for: nfqnl_test

http://bugzilla.netfilter.org/show_bug.cgi?id=743 Summary: Errors in compiling nfqnl_test.c Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: Ubuntu Status: NEW Severity: enhancement Priority: P5 Component: netfilter hooks AssignedTo: netfilter-buglog at lists.netfilter.org...

https://bugzilla.netfilter.org/show_bug.cgi?id=846 Summary: ./nfqnl_test usage ! no activity shown Product: libnetfilter_queue Version: unspecified Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: trivial Priority: P5 Component: libnetfilter_queue AssignedTo: netfilte...

Hi, I am experimenting with libnetfilter_queue. libnetfilter_queue is a userspace library providing an API to packets that have been queued by the kernel packet filter. I am using sample code(nfqnl_test.c) available on netfilter.org. I have generated two binaries (queue0 and queue1) using that nfqnl_test.c sample code. These binaries are working as per expected behaviour in case of Centos 6.2 but with Centos 6.5 only one queue is receiving network traffic. I am not able to understand why only on...

...ed a problem with NFQUEUE and large ICMP packets. First I thought it was something in my packet processor implementation, but the example code from netfilter.org reproduces the issue I faced. http://netfilter.org/projects/libnetfilter_queue/doxygen/nfqnl__test_8c_source.html Compiled with: $ gcc nfqnl_test.c -o nfqnl_test -lnetfilter_queue Test setup: # iptables -F # iptables -I INPUT -j NFQUEUE --queue-num 1 # ./nfqnl_test So far everything is ok. I can see packets flowing via the queue. First a working large ICMP packet: $ ping -c 4 -s 3980 localhost PING localhost.localdomain (127.0.0.1) 3980...

...U) and 1.0.5 (ArchLinux). I've narrowed the problem down to nfq_set_verdict(), and only when allowing a connection. I've also reproduced it with the tester attached, a minimal version of this one: https://raw.githubusercontent.com/adsbh7/net_filter/e27f6dec4c5d29b71c70b9c33e00b644334726fd/nfqnl_test.c steps to reproduce it: # iptables -t mangle -I OUTPUT -j NFQUEUE --queue-num 100 # ./nfqnl_test $ ping netfilter.org The problem occurs on kernel 5.7.0 (+ hardening-runtime deb package), but a user also reported it with 5.6.16. Finally, I also compiled the nfqueue from the git, and it...

...ent output -> http://bugzilla.netfilter.org/show_bug.cgi?id=705 Some accepted packets get lost -> http://bugzilla.netfilter.org/show_bug.cgi?id=708 nfq_nfnlh() and nfq_fd() should have const arguments -> http://bugzilla.netfilter.org/show_bug.cgi?id=715 Errors in compiling nfqnl_test.c -> http://bugzilla.netfilter.org/show_bug.cgi?id=743 Range check for ulog-cprange is wrong -> http://bugzilla.netfilter.org/show_bug.cgi?id=748 IPv6 bridging bug -> http://bugzilla.netfilter.org/show_bug.cgi?id=751 ipq_read() will return an error (rc = -1) and the error me...

...-> http://bugzilla.netfilter.org/show_bug.cgi?id=708 nfq_nfnlh() and nfq_fd() should have const arguments -> http://bugzilla.netfilter.org/show_bug.cgi?id=715 double entry of nf_conntrack_max in /proc -> http://bugzilla.netfilter.org/show_bug.cgi?id=722 Errors in compiling nfqnl_test.c -> http://bugzilla.netfilter.org/show_bug.cgi?id=743 Range check for ulog-cprange is wrong -> http://bugzilla.netfilter.org/show_bug.cgi?id=748 IPv6 bridging bug -> http://bugzilla.netfilter.org/show_bug.cgi?id=751 ipq_read() will return an error (rc = -1) and the error me...

...ent output -> http://bugzilla.netfilter.org/show_bug.cgi?id=705 Some accepted packets get lost -> http://bugzilla.netfilter.org/show_bug.cgi?id=708 nfq_nfnlh() and nfq_fd() should have const arguments -> http://bugzilla.netfilter.org/show_bug.cgi?id=715 Errors in compiling nfqnl_test.c -> http://bugzilla.netfilter.org/show_bug.cgi?id=743 Range check for ulog-cprange is wrong -> http://bugzilla.netfilter.org/show_bug.cgi?id=748 IPv6 bridging bug -> http://bugzilla.netfilter.org/show_bug.cgi?id=751 ipq_read() will return an error (rc = -1) and the error me...

Hi! The Netfilter project proudly presents: libnetfilter_queue 1.0.1 libnetfilter_queue is a userspace library providing an API to packets that have been queued by the kernel packet filter. See ChangeLog that comes attached to this email for more details. You can download it from: http://www.netfilter.org/projects/libnetfilter_queue/downloads.html

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=404 ------- Additional Comments From dave@rem.homeip.net 2006-02-03 20:29 MET ------- Created an attachment (id=205) --> (https://bugzilla.netfilter.org/bugzilla/attachment.cgi?id=205&action=view) Description of "stuck packets", observations Still don't know WHY packets get stuck... -- Configure bugmail:

https://bugzilla.netfilter.org/show_bug.cgi?id=845 Summary: checking for LIBNFNETLINK... configure: error: Package requirements (libnfnetlink >= 0.0.41) were not met: Product: libnetfilter_queue Version: unspecified Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: normal