string matching in kernel 2.6

Ming-Ching Tiew mingching.tiew at
Mon Jul 25 05:33:44 CEST 2005

> From: "Jan Engelhardt" <jengelh at>
> > 
> > If neither works, you can try abusing ipt_layer7 ;-)
> > See
> > 

I had a quick look at the source of ipt_layer7, it's linearising 
the skb so that the pattern can be matched. For ipp2p, it simply 
skip the non-linear skb (and it has been accepted into pom-ng).

So I think it should be quite easy if one wants to also handle 
the non-linear case, ie just linearise the skb. Not efficient, but
it should work. Right ?


More information about the netfilter mailing list