similar to: [Bug 1075] New: extra: checksum computation bugs

I am asking this on behalf of the HIPL developers; http://infrahip.hiit.fi/ https://launchpad.net/hipl They have been working on getting their code consistant to the new libnetfilter architecture. Finally have Fedora 18 and 19 available, but have hit a stumbling block with Centos 6. They tell me they are not finding libnetfilter_queue. Here is their message to me: On 08/08/2013 02:03 PM,

Hi! The Netfilter project proudly presents: libnetfilter_queue 1.0.1 libnetfilter_queue is a userspace library providing an API to packets that have been queued by the kernel packet filter. See ChangeLog that comes attached to this email for more details. You can download it from: http://www.netfilter.org/projects/libnetfilter_queue/downloads.html

https://bugzilla.netfilter.org/show_bug.cgi?id=957 Summary: [PATCH] Wrong function name in libnetfilter_queue/libnetfilter_queue_ipv6.h Product: libnetfilter_queue Version: unspecified Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: libnetfilter_queue

http://bugzilla.netfilter.org/show_bug.cgi?id=708 Summary: Some accepted packets get lost Product: libnetfilter_queue Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P3 Component: libnetfilter_queue AssignedTo: netfilter-buglog at

https://bugzilla.netfilter.org/show_bug.cgi?id=837 Summary: Large ICMP packets are lost Product: libnetfilter_queue Version: unspecified Platform: x86_64 OS/Version: other Status: NEW Severity: normal Priority: P5 Component: libnetfilter_queue AssignedTo: netfilter-buglog at lists.netfilter.org

Hi! Today the netfilter project released libnfnetlink-0.0.11 ftp://ftp.netfilter.org/pub/libnfnetlink/libnfnetlink-0.0.11.tar.bz2 This is the low-level communications library libnetfilter_log-0.0.10 ftp://ftp.netfilter.org/pub/libnetfilter_log/libnetfilter_log-0.0.10.tar.bz2 This is the userspace library for nfnetlink_log in 2.6.14 It is used by the upcoming ulogd-2.00beta release Needs

https://bugzilla.netfilter.org/show_bug.cgi?id=1384 Bug ID: 1384 Summary: memory leaks when netfilter is used to filter network traffic Product: netfilter/iptables Version: unspecified Hardware: mips OS: other Status: NEW Severity: major Priority: P5 Component:

Hi! The Netfilter proudly project presents: * libnetfilter_log-1.0.0 libnetfilter_log is a userspace library providing interface to packets that have been logged by the kernel packet filter. It is is part of a system that deprecates the old syslog/dmesg based packet logging. This releases contains a new function to print logs in XML format and the doxygen-based documentation. See Changelog

https://bugzilla.netfilter.org/show_bug.cgi?id=846 Summary: ./nfqnl_test usage ! no activity shown Product: libnetfilter_queue Version: unspecified Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: trivial Priority: P5 Component: libnetfilter_queue AssignedTo: netfilter-buglog at

http://bugzilla.netfilter.org/show_bug.cgi?id=715 Summary: nfq_nfnlh() and nfq_fd() should have const arguments Product: libnetfilter_queue Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: libnetfilter_queue AssignedTo: netfilter-buglog

http://bugzilla.netfilter.org/show_bug.cgi?id=716 Summary: nfq_errno+pthreads is not compatible Product: libnetfilter_queue Version: unspecified Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: libnetfilter_queue AssignedTo: netfilter-buglog at lists.netfilter.org

Hi, I am experimenting with libnetfilter_queue. libnetfilter_queue is a userspace library providing an API to packets that have been queued by the kernel packet filter. I am using sample code(nfqnl_test.c) available on netfilter.org. I have generated two binaries (queue0 and queue1) using that nfqnl_test.c sample code. These binaries are working as per expected behaviour in case of Centos 6.2

https://bugzilla.netfilter.org/show_bug.cgi?id=1440 Bug ID: 1440 Summary: kernel oops allowing a connection with nfq_set_verdict() on kernel 5.7.x with hardening parameters Product: libnetfilter_queue Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW

http://bugzilla.netfilter.org/show_bug.cgi?id=586 Summary: Problems changing the source address of a packet Product: libnetfilter_queue Version: unspecified Platform: All OS/Version: All Status: NEW Severity: blocker Priority: P1 Component: libnetfilter_queue AssignedTo: laforge at netfilter.org

Hi. Has anyone written or used, or does anyone know of, applications that use libnetfilter_queue to mangle packets in userspace before letting them proceed on their way? I''m wondering if it''s possible to write a transparent proxy that way, and looking for examples and/or inspiration. Thanks. -- ams

http://bugzilla.netfilter.org/show_bug.cgi?id=433 eric at inl.fr changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID ------- Comment #5 from eric at inl.fr 2009-12-14 22:02 -------

https://bugzilla.netfilter.org/show_bug.cgi?id=962 Summary: [PATCH] nfq_ip_snprintf always shows the same address in SRC and DST Product: libnetfilter_queue Version: unspecified Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: libnetfilter_queue

https://bugzilla.netfilter.org/show_bug.cgi?id=963 Summary: nfq_udp_get_payload and nfq_udp_get_payload_len return wrong results Product: libnetfilter_queue Version: unspecified Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: libnetfilter_queue

https://bugzilla.netfilter.org/show_bug.cgi?id=1069 Bug ID: 1069 Summary: fix incorrect checksum on big endian platform Product: libnetfilter_queue Version: unspecified Hardware: mips OS: All Status: NEW Severity: enhancement Priority: P5 Component: libnetfilter_queue

This question is not about linux usage. But still i think user list is a good crowd for linux programmer. So here it goes. I have this libnetfilter_queue application which receives packets from kernel based on some iptables rule. Before going straight to my problem, i'm giving a sample workable code and other tools to set up a test environment so that We problem definition and possible