Re: ng_netflow: testers are welcome

From: Gleb Smirnoff (glebius_at_cell.sick.ru)
Date: 02/23/04

  • Next message: Julian Elischer: "RE: ng_netflow: testers are welcome" 
    Date: Mon, 23 Feb 2004 22:46:48 +0300
To: Vasenin Alexander aka BlackSir <blacksir@number.ru>

    On Mon, Feb 23, 2004 at 10:32:42PM +0300, Vasenin Alexander aka BlackSir wrote:
    V> But there is bug in "ipfw tee" - packets is always immediately accepted
    V> instead of continue going through the ruleset, so tee must be the last
    V> rule(So, ng_netflow never see packets that denied by ipfw before tee rule).
    V> Maybe there is way to use 'divert'? I've tried - packets going to divert
    V> socket,then ng_netflow... and never come back... Actually I'm not quite
    V> understand mechanism of returning from divert - ng_ksocket have only one
    V> hook...

    This behavior of "ipfw tee" is even mentioned in BUGS. However
    there have been posted a fix in kern/61259. I have not tested it,
    you can try.

    Another way of solving "ipfw tee" problem would be writing a netgraph
    node with 2 hooks, first one sends received data back into itself and
    a copy towards second hook. ng_ksocket with divert should be connected
    to first hook, and ng_netflow to second one. You can call this node
    ng_echotee :)
    :))) When I typed it, I've understood that this behavior can be achieved
    combining ng_tee and ng_echo from base system. Really netgraph rocks!

    V> 2Gleb: It would be pleasure for me to write a little example based on our
    V> discussion for README if you need.

    I'd be glad if you show me your current netgraph setup script. Surely
    I can reproduce it myself, but live example would be better than imaginary. 

    -- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE
_______________________________________________
freebsd-isp@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-isp
To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
  • Next message: Julian Elischer: "RE: ng_netflow: testers are welcome"

    Relevant Pages

    • Re: ng_netflow: testers are welcome
      ... ng_netflow never see packets that denied by ipfw before tee rule). ... V> Maybe there is way to use 'divert'? ... This behavior of "ipfw tee" is even mentioned in BUGS. ... a copy towards second hook. ...
      (freebsd-net)
    • netgraph: bridge with fwd and divert
      ... I'm trying to let my FreeBSD 4.9 box, working as bridge, divert and fwd ... packets lets just send packets we need to layer 3 and let system fwd ... hook if come for right and to the right if come from left. ...
      (freebsd-net)