about NFQUEUE and nth match
eric at inl.fr
Tue Aug 2 01:32:52 CEST 2005
Le lundi 01 août 2005 à 19:18 -0400, Frank Abel Cancio Bello a écrit :
> > On Mon, 2005-08-01 at 16:29 -0400, Frank Abel Cancio Bello wrote:
> > > Hi all!
> > >
> > > Some time ago I post a mail in this list
> > >
> > > asking about how manage packets that was captured with "libipq" and
> > > target in different threads or process.
> > >
> > > Now with the new "NFQUEUE" target I can have many process reading
> > > in different queues numbers and using "nth match" to spread equitably
> > > all process the captured packects.
> > This look terribly awfull to me ! You better use a single multithreaded
> > application.
> Due to libipq isn't thread-safe (see one problem in
> and I'm not a netfilter hacker I send the mail
> (https://lists.netfilter.org/pipermail/netfilter/2005-April/059499.html) but
> anybody reply.
> The problem is that I need to know if is safe make a multithreaded
> application with libipq. Now I have the same questions that that some time
>From my experience, I've tested with two threads. One receiving packets
the other sending packets back to kernel. It seems to work fine, even
under heavy load. I've never tried multiple sending and receiving
But you can always have something like that by using messages between
Eric Leblond <eric at inl.fr>
More information about the netfilter