全部博文(230)
| 标题 | 阅读 | 评论 | 转发 | 发布日期 | |
|---|---|---|---|---|---|
| DMIScope-BIOS 刷写 BIOS 来安装 OEM 系统 | 6338 | 0 | 0 | 2007-08-21 | |
| 一句看完以后使我久久不能忘怀的话 | 1619 | 0 | 0 | 2007-08-18 | |
| ssh 公钥认证文件名(总忘,记下来!) | 2473 | 2 | 0 | 2007-08-18 | |
| 用 readline 实现了自定义命令补全功能 | 2541 | 0 | 0 | 2007-08-16 | |
| 我 vmware 下 linux 的时钟超快 | 1773 | 1 | 0 | 2007-08-16 | |
| 开始接触 2.6 内核了 | 2261 | 2 | 0 | 2007-08-13 | |
| 买了个 N72,攒一些资源站点 | 1713 | 0 | 0 | 2007-08-11 | |
| ipt_account 的用法 | 3802 | 0 | 0 | 2007-08-11 | |
| The system.map File | 2041 | 0 | 0 | 2007-07-11 | |
| 最近有点累,也许应该休息一下了 | 2072 | 2 | 0 | 2007-07-09 | |
| Linux 做无线 AP | 5633 | 0 | 0 | 2007-07-07 | |
| 一直觉得刘翔和巩俐很像,可是没人认同我,难道我的眼光有问题? | 2322 | 5 | 0 | 2007-07-07 | |
| ASCII 码表 | 1946 | 0 | 0 | 2007-07-06 | |
| The TCP state transition table needs a few words | 2497 | 4 | 0 | 2007-07-02 | |
| 什么是白皮书,蓝皮书,绿皮书,红皮书 | 2735 | 0 | 0 | 2007-06-30 | |
| RFC1025 - TCP AND IP BAKE OFF | 3050 | 0 | 0 | 2007-06-28 | |
| 直升机能做翻滚吗? | 3185 | 0 | 0 | 2007-06-24 | |
| http://www.quest.i-poon.com | 4118 | 2 | 0 | 2007-06-13 | |
| iptables 里 recent 模块的用法 | 3935 | 0 | 1 | 2007-06-10 | |
| 存储入门:光纤网卡和 HBA 卡的区别 | 3448 | 0 | 0 | 2007-06-10 |
phoenixcsl2015-05-26 09:57
hi,platinum,请问netfilter能够过滤arp的东西吗?我写了一些代码,在NF_ARP_IN和OUT捕获一些信息,但是为什么什么都抓不到?
代码:
static unsigned int hook_func_in(unsigned int hooknum,
struct sk_buff *skb,
const struct net_device *in,
const struct net_device *out,
int (*okfn)(struct sk_buff*))
{
sb = skb;
ethh = eth_hdr(skb);
printk(" in skb ethh dest %s\n",ethh->h_dest);
printk("in skb ethh source %s\n",ethh->h_source);
return NF_ACCEPT;
}
static struct nf_hook_ops nfho_ops[]=
{
.hook = hook_func_in,
.owner = THIS_MODULE,
.pf =NF_ARP,
.hooknum = NF_ARP_IN,
.priority = NF_IP_PRI_FIRST,
}
static struct nf_hook_ops nfho_ops[]=
{
.hook = hook_func_in,
.owner = THIS_MODULE,
.pf =NF_ARP,
.hooknum = NF_ARP_IN,
.priority = NF_IP_PRI_FIRST,
}