Of course you can code a netfilter target extension module. Changing
the main kernel network code directly is not necessairy.

Check out the pdf for writing such modules under

http://jengelh.medozas.de/

Check out the
Greetings
t.

On Thu, Aug 28, 2008 at 4:48 PM, Thiago Lacerda [off-list ref] wrote:

Hi everyone, I'm a Computer Science student from Brazil.

Hope that you can help me with my undergraduate conclusion project.

I have to capture packets at kernel level. More specifically, I have
to write a kernel module (for kernel 2.6) that access all the packets
that are coming through my network interface, then perform some
operations on that packets and then decide if they can go to user land
or not.

Please note that I can't do it as a firewall, because I can't
interfere on the  applications that  work with network. My kernel
module will get communicated with traffic classifier, that will be
executing at user land and will inspect the packets that the module
passed to it.

Can you help me on how can I develop it?

Thanks in advance

Best regards


--
Thiago de Barros Lacerda
Computer Science Undergraduate Student - CIn/UFPE - 2004.2
Researcher/Software Developer - GPRT - Networking and
Telecommunications Research Group
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html