How to print packet info of a specific IP address in netfilter using C?
up vote
0
down vote
favorite
I'm using this code to print some packet info about "all" received and sent packets from all IP addresses. How do I only print packet info of a specific IP address?
this is part of the code:
{
struct ethhdr *eth;
struct iphdr *ip_header;
eth = (struct ethhdr*)skb_mac_header(skb);
ip_header = (struct iphdr *)skb_network_header(skb);
if (HOST_IP_ADDR == ip_header->saddr)
return NF_ACCEPT;
printk("NF_IP_LOCAL_IN hook:n");
printk("src mac %pM, dst mac %pMn", eth->h_source, eth->h_dest);
printk("src IP addr:=%pI4n", &ip_header->saddr);
return NF_ACCEPT;
}
c hook netfilter
asked Nov 20 at 4:22
Xi N
102
add a comment |
up vote
0
down vote
favorite
I'm using this code to print some packet info about "all" received and sent packets from all IP addresses. How do I only print packet info of a specific IP address?
this is part of the code:
{
struct ethhdr *eth;
struct iphdr *ip_header;
eth = (struct ethhdr*)skb_mac_header(skb);
ip_header = (struct iphdr *)skb_network_header(skb);
if (HOST_IP_ADDR == ip_header->saddr)
return NF_ACCEPT;
printk("NF_IP_LOCAL_IN hook:n");
printk("src mac %pM, dst mac %pMn", eth->h_source, eth->h_dest);
printk("src IP addr:=%pI4n", &ip_header->saddr);
return NF_ACCEPT;
}
c hook netfilter
asked Nov 20 at 4:22
Xi N
102
1
Something along the line ofif (the ip address == the ip address you want) {print the stuff}?
– immibis
Nov 20 at 4:47
I tried this option and also I used strcmp, both of them gives errors.
– Xi N
Nov 20 at 12:39
if (HOST_IP_ADDR == ip_header->saddr)looks like an IP address comparison to me. So you know how to compare IP addresses.
– immibis
Nov 20 at 20:44
I would like to capture packet info for specific address, my VM has around 10 IP. I assign those IPs statically and I need a way to compare
– Xi N
Nov 21 at 1:38
add a comment |
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I'm using this code to print some packet info about "all" received and sent packets from all IP addresses. How do I only print packet info of a specific IP address?
this is part of the code:
{
struct ethhdr *eth;
struct iphdr *ip_header;
eth = (struct ethhdr*)skb_mac_header(skb);
ip_header = (struct iphdr *)skb_network_header(skb);
if (HOST_IP_ADDR == ip_header->saddr)
return NF_ACCEPT;
printk("NF_IP_LOCAL_IN hook:n");
printk("src mac %pM, dst mac %pMn", eth->h_source, eth->h_dest);
printk("src IP addr:=%pI4n", &ip_header->saddr);
return NF_ACCEPT;
}
c hook netfilter
asked Nov 20 at 4:22
Xi N
102
I'm using this code to print some packet info about "all" received and sent packets from all IP addresses. How do I only print packet info of a specific IP address?
this is part of the code:
{
struct ethhdr *eth;
struct iphdr *ip_header;
eth = (struct ethhdr*)skb_mac_header(skb);
ip_header = (struct iphdr *)skb_network_header(skb);
if (HOST_IP_ADDR == ip_header->saddr)
return NF_ACCEPT;
printk("NF_IP_LOCAL_IN hook:n");
printk("src mac %pM, dst mac %pMn", eth->h_source, eth->h_dest);
printk("src IP addr:=%pI4n", &ip_header->saddr);
return NF_ACCEPT;
}
c hook netfilter
c hook netfilter
asked Nov 20 at 4:22
Xi N
102
asked Nov 20 at 4:22
Xi N
102
asked Nov 20 at 4:22
Xi N
102
asked Nov 20 at 4:22
Xi N
102
asked Nov 20 at 4:22
Xi N
102
102
1
Something along the line ofif (the ip address == the ip address you want) {print the stuff}?
– immibis
Nov 20 at 4:47
I tried this option and also I used strcmp, both of them gives errors.
– Xi N
Nov 20 at 12:39
if (HOST_IP_ADDR == ip_header->saddr)looks like an IP address comparison to me. So you know how to compare IP addresses.
– immibis
Nov 20 at 20:44
I would like to capture packet info for specific address, my VM has around 10 IP. I assign those IPs statically and I need a way to compare
– Xi N
Nov 21 at 1:38
add a comment |
1
Something along the line ofif (the ip address == the ip address you want) {print the stuff}?
– immibis
Nov 20 at 4:47
I tried this option and also I used strcmp, both of them gives errors.
– Xi N
Nov 20 at 12:39
if (HOST_IP_ADDR == ip_header->saddr)looks like an IP address comparison to me. So you know how to compare IP addresses.
– immibis
Nov 20 at 20:44
I would like to capture packet info for specific address, my VM has around 10 IP. I assign those IPs statically and I need a way to compare
– Xi N
Nov 21 at 1:38
1
1
Something along the line of
if (the ip address == the ip address you want) {print the stuff}?– immibis
Nov 20 at 4:47
Something along the line of
if (the ip address == the ip address you want) {print the stuff}?– immibis
Nov 20 at 4:47
I tried this option and also I used strcmp, both of them gives errors.
– Xi N
Nov 20 at 12:39
I tried this option and also I used strcmp, both of them gives errors.
– Xi N
Nov 20 at 12:39
if (HOST_IP_ADDR == ip_header->saddr) looks like an IP address comparison to me. So you know how to compare IP addresses.– immibis
Nov 20 at 20:44
if (HOST_IP_ADDR == ip_header->saddr) looks like an IP address comparison to me. So you know how to compare IP addresses.– immibis
Nov 20 at 20:44
I would like to capture packet info for specific address, my VM has around 10 IP. I assign those IPs statically and I need a way to compare
– Xi N
Nov 21 at 1:38
I would like to capture packet info for specific address, my VM has around 10 IP. I assign those IPs statically and I need a way to compare
– Xi N
Nov 21 at 1:38
add a comment |
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
draft saved
draft discarded
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53386177%2fhow-to-print-packet-info-of-a-specific-ip-address-in-netfilter-using-c%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Something along the line of
if (the ip address == the ip address you want) {print the stuff}?– immibis
Nov 20 at 4:47
I tried this option and also I used strcmp, both of them gives errors.
– Xi N
Nov 20 at 12:39
if (HOST_IP_ADDR == ip_header->saddr)looks like an IP address comparison to me. So you know how to compare IP addresses.– immibis
Nov 20 at 20:44
I would like to capture packet info for specific address, my VM has around 10 IP. I assign those IPs statically and I need a way to compare
– Xi N
Nov 21 at 1:38