dev_add_pack() + marked packets
Rob <[email protected]>
| Newsgroups | gmane.linux.network.bridge.ebtables.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi, I don't have the code to reference infront of me right now, but I will try to be as clear as I can :) I have a protocol handler registered with dev_add_pack(). I have looked through the ebtables source to find out how it marks packets. I have mimicked what ebtables does: set skb->nfmark = 1; skb->nfcache |= NFC_ALTERED; from within my protocol handler. By this point, I would have figured the packet is properly marked... but it is not. What am I missing? I can do other things like twiddle the mac address so I'm pretty sure I don't have a 'copy' of the skb, I have the real thing. I then set up ebtables like: ebtables -A FORWARD --mark 1 -j DROP ==> just to test to see if our marked packets leave the box. But the problem is, the 'nfmark' has been reset back to ZERO and the filter never matches. (I put some printk's in the ebtables match function) I really have no clue why this is the case. I am hoping someone can assist me in figuring this out. Any thoughts? Thanks a lot for any help! -Rob P.S. If I'm unclear about something, I will fix :) ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click