Re: netfilter expected behavior for established connections

On Wed, 12 Mar 2025 at 13:51, Florian Westphal <[email protected]> wrote:
>
> Antonio Ojea <[email protected]> wrote:
> > Is there some kind of optimization that just directly copies the data
> > without going through netfilter hooks or am I doing something wrong?
>
> Looks lke whatever environment you are using has bpf progs in place
> that change packet flow, or some other proprietrary modules.


hmm, I'm building a vanilla kernel and running it with virtme-ng (but
it is indeed a controlled host)

vng -v -r arch/x86/boot/bzImage --user=root

let me try to run in a different and more clean environment and report back