Re: ip level NKE - how to trace the process that generates traffic?
Re: ip level NKE - how to trace the process that generates traffic?
- Subject: Re: ip level NKE - how to trace the process that generates traffic?
- From: Vincent Lubet <email@hidden>
- Date: Sat, 03 Mar 2012 15:42:07 -0800
On Mar 3, 2012, at 8:49 AM, James J wrote:
> Hello
> I am developing a kind of a traffic redirector for transparent proxy
> filter, which should redirect all the IP traffic to a proxy (usermode)
> application, except the traffic, that is generated by this proxy
> application, which should be passed through freely.
>
> I know I can find out whether the mbufs come from my application or
> not in a Socket filter NKE (when the NKE is being attached to the
> application socket, by calling proc_selfpid()). However, in IP level
> NKE this is impossible.
> Would there be a way to trace "the origins" of the mbuf that I receive
> in my ipf_output_func() function?
You could use a socket filter NKE that would add a specific mbuf tag for traffic being sent by your proxy application. Your IP filter would then simply check the presence of this mbuf ta.
Vincent
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden