Re: Help with ulog!!

Bart De Schuymer <[email protected]>
Newsgroups gmane.linux.network.bridge.ebtables.user
Message-ID <[email protected]>
Op zo, 11-09-2005 te 22:56 +0400, schreef ramsurrunv-aD7nsNzqxXzCK/[email protected]:
> Hi to all,
> 
> I would like to know 2 things:
> 
> 1)if the ulog watcher make s a copy of the frame or does it send the
> actual from the network stack?
> 
> 2) ebtables -A OUTPUT -p IPv4 -j ACCEPT
>    ebtables -A OUTPUT -p IPv4 --ulog-nlgroup 5 -j ACCEPT
> 
> Do both these rules have the resultant same effect, i.e sending IPv4
> packets out of an interface? Should the rule containing ulog be placed
> above or below the first rule?

ulog copies the contents of the frame, using ulog's specific format, to
userspace. As ulog is a watcher, it does not alter the packet and does
not decide what to do with it. The above 2 rules therefore both accept
the packet.

cheers,
Bart




-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.