similar to: Non-linear skbs apparently prevent NFQUEUE from working properly

This question is not about linux usage. But still i think user list is a good crowd for linux programmer. So here it goes. I have this libnetfilter_queue application which receives packets from kernel based on some iptables rule. Before going straight to my problem, i'm giving a sample workable code and other tools to set up a test environment so that We problem definition and possible

https://bugzilla.netfilter.org/show_bug.cgi?id=1742 Bug ID: 1742 Summary: using nfqueue breaks SCTP connection (tracking) Product: libnetfilter_queue Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: libnetfilter_queue Assignee:

Hi, I am experimenting with libnetfilter_queue. libnetfilter_queue is a userspace library providing an API to packets that have been queued by the kernel packet filter. I am using sample code(nfqnl_test.c) available on netfilter.org. I have generated two binaries (queue0 and queue1) using that nfqnl_test.c sample code. These binaries are working as per expected behaviour in case of Centos 6.2

https://bugzilla.netfilter.org/show_bug.cgi?id=1066 Bug ID: 1066 Summary: nfq_get_timestamp() not setting timeval struc Product: libnetfilter_queue Version: unspecified Hardware: x86_64 OS: Ubuntu Status: NEW Severity: normal Priority: P5 Component: libnetfilter_queue

https://bugzilla.netfilter.org/show_bug.cgi?id=1766 Bug ID: 1766 Summary: nfqueue randomly drops packets with same tuple Product: netfilter/iptables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: major Priority: P5 Component: netfilter hooks Assignee:

https://bugzilla.netfilter.org/show_bug.cgi?id=846 Summary: ./nfqnl_test usage ! no activity shown Product: libnetfilter_queue Version: unspecified Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: trivial Priority: P5 Component: libnetfilter_queue AssignedTo: netfilter-buglog at

https://bugzilla.netfilter.org/show_bug.cgi?id=941 Summary: --queue-balance sending all traffic to queue 0 Product: netfilter/iptables Version: linux-2.6.x Platform: x86_64 OS/Version: other Status: NEW Severity: normal Priority: P5 Component: nfnetlink_queue AssignedTo: netfilter-buglog at

https://bugzilla.netfilter.org/show_bug.cgi?id=837 Summary: Large ICMP packets are lost Product: libnetfilter_queue Version: unspecified Platform: x86_64 OS/Version: other Status: NEW Severity: normal Priority: P5 Component: libnetfilter_queue AssignedTo: netfilter-buglog at lists.netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=992 Bug ID: 992 Summary: Missing space between NFQUEUE extra parameters Product: iptables Version: 1.4.x Hardware: x86_64 OS: Ubuntu Status: NEW Severity: enhancement Priority: P5 Component: iptables-save Assignee:

Hi all, I have been trying to run an IDS system on OpenVZ based VPS which requires that I run this IPTABLES command : iptables -A FORWARD -j NFQUEUE However, so far I have not suceeded. I always get this errors: iptables: Unknown error 4294967295 Even when the NFQUEUE  IP modules was enabled by the VPS provider, I still get these errors and this appears to be OpenVZ bug.  So I want to

https://bugzilla.netfilter.org/show_bug.cgi?id=939 Summary: extensions: NFQUEUE: missing cpu-fanout Product: netfilter/iptables Version: linux-2.6.x Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: ip_tables (kernel) AssignedTo:

https://bugzilla.netfilter.org/show_bug.cgi?id=1322 Bug ID: 1322 Summary: Accepting in an nfqueue breaks multi-chain processing Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: kernel Assignee: pablo at

https://bugzilla.netfilter.org/show_bug.cgi?id=778 Florian Westphal <fw at strlen.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED CC| |fw at strlen.de --- Comment #1 from Florian Westphal

https://bugzilla.netfilter.org/show_bug.cgi?id=1440 Bug ID: 1440 Summary: kernel oops allowing a connection with nfq_set_verdict() on kernel 5.7.x with hardening parameters Product: libnetfilter_queue Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW

Hi all, I have a netfilter_queue app which de-obfuscates a already obfuscated udp packets. de-obfuscation process ends successfully but somehow packet is not reaching to the udp daemon. i'm suspecting this is happening because of a udp checksum mismatch. so i'm wondering how can i get logs of packets which are dropped because of udp checksum mismatch? i've heard linux by default

https://bugzilla.netfilter.org/show_bug.cgi?id=1436 Bug ID: 1436 Summary: nf_conntrack_update fails in fedora kernels 5.6.16 and 5.6.18 Product: netfilter/iptables Version: linux-2.6.x Hardware: x86_64 OS: Fedora Status: NEW Severity: critical Priority: P5 Component:

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=404 ------- Additional Comments From dave@rem.homeip.net 2006-02-03 20:29 MET ------- Created an attachment (id=205) --> (https://bugzilla.netfilter.org/bugzilla/attachment.cgi?id=205&action=view) Description of "stuck packets", observations Still don't know WHY packets get stuck... -- Configure bugmail:

https://bugzilla.netfilter.org/show_bug.cgi?id=988 Bug ID: 988 Summary: manpage: mention that REJECT should be used with care Product: iptables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: iptables Assignee:

http://bugzilla.netfilter.org/show_bug.cgi?id=600 Summary: ULOG target does not support --log-uid Product: iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P1 Component: iptables AssignedTo: laforge at netfilter.org ReportedBy: dom at

Hello, I am using the IMQ with iptables (latest versions) and asking all packets to be enqueued to IMQ0 from both prerouting and postrouting (using different iptables rules to mark different streams). When I do this I get the kernel saying: "Dead loop on netdevice imq0, fix it urgently!" and communications stop intermittently. If I remove the jump from either preroute or postroute it