hno at marasystems.com
Sat Dec 4 15:57:06 CET 2004
On Fri, 3 Dec 2004, Steven J Scott wrote:
> I am trying to decode packets within the kernel using netfilter hooks, and
> I have read through multiple examples of parsing the src and dst address,
> ports, etc., but I am unable to find any information on parsing the
> payload of the packet. What I am trying to do is examine payload to find
> a string match. Could anyone point me in the right direction.
See either the NAT helpers or the STRING match.
Beware of non-linear SKBs in Linux-2.6. Looking into the payload is not as
easy as it was in Linux-2.4.
More information about the netfilter-devel