Netgraph ng_patch and ng_input: where to find packets?

Sami Halabi sodynet1 at gmail.com
Mon Dec 9 07:36:56 UTC 2013


Hi,
Actually following the ng_patch the following worked for me (using 9.2-R
-amd64):

kldload ng_patch
kldload ng_ipfw
/usr/sbin/ngctl -f- << SEQ
                 mkpeer ipfw: patch 300 in
                 name ipfw:300 src_dst_chg
                 msg src_dst_chg: setconfig { count=2 csum_flags=1 ops=[
      \
                         { mode=1 value=0xc0a8e609 length=4 offset=12 }  \
                         { mode=1 value=0xc0a8e680 length=4 offset=16 } ] }
         SEQ
/sbin/ipfw add 600 netgraph 300 log ip from any to 239.0.0.19 dst-port 1234
in via vlan999

Sami


On Sun, Dec 8, 2013 at 5:44 PM, Julian Elischer <julian at freebsd.org> wrote:

> On 12/8/13, 6:43 PM, Sami Halabi wrote:
>
>> Hi Gamov,
>> Have got this to work?
>> If so would share configurations?
>>
>> Thanks in advance,
>> Sami
>> בתאריך 29 בנוב 2013 19:28, "Victor Gamov" <vit at euro-comm.net> כתב:
>>
>>
>>
> if not then the way to track it it to put a breakpoint on the netgraph
> node that handles the packet and just single step through until you see
> where the packet goes..
> kdb would give you a decent idea but a second machine (or a virtual
> machine) with kgdb would really show you what's going on.
>
>
>


-- 
Sami Halabi
Information Systems Engineer
NMS Projects Expert
FreeBSD SysAdmin Expert


More information about the freebsd-net mailing list