sk_buff examples

Henrik Nordstrom hno at marasystems.com
Sat Dec 4 15:57:06 CET 2004


On Fri, 3 Dec 2004, Steven J Scott wrote:

> I am trying to decode packets within the kernel using netfilter hooks, and
> I have read through multiple examples of parsing the src and dst address,
> ports, etc., but I am unable to find any information on parsing the
> payload of the packet.  What I am trying to do is examine payload to find
> a string match. Could anyone point me in the right direction.

See either the NAT helpers or the STRING match.

Beware of non-linear SKBs in Linux-2.6. Looking into the payload is not as 
easy as it was in Linux-2.4.

Regards
Henrik



More information about the netfilter-devel mailing list