From owner-freebsd-net@FreeBSD.ORG  Wed May  1 00:13:46 2013
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115])
 by hub.freebsd.org (Postfix) with ESMTP id 87EA3EA2
 for <freebsd-net@freebsd.org>; Wed,  1 May 2013 00:13:46 +0000 (UTC)
 (envelope-from juli@clockworksquid.com)
Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com
 [209.85.217.172])
 by mx1.freebsd.org (Postfix) with ESMTP id 12A841021
 for <freebsd-net@freebsd.org>; Wed,  1 May 2013 00:13:45 +0000 (UTC)
Received: by mail-lb0-f172.google.com with SMTP id o10so1067451lbi.3
 for <freebsd-net@freebsd.org>; Tue, 30 Apr 2013 17:13:39 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=google.com; s=20120113;
 h=x-received:mime-version:sender:in-reply-to:references:from:date
 :x-google-sender-auth:message-id:subject:to:cc:content-type
 :x-gm-message-state;
 bh=jsRzQ1p9tXGnNyvcKIQKA1rq71qVpl9u8/36YRZQG1Q=;
 b=QCmn3xzGWrQ4j2Z240owqb1yRiGimJZr2ulMFCzoYLeSEBvcCnC1a9FIR5xScvpTPD
 4KWUzcB9VzXlRXKjwmMFjNb/jWcMw20ZCYHahW0k6FnzjgNaxjvt39Fq89B30RasrF0Z
 baMpyjY5PayG2b1yopMslCtVQBwnYZi7jHAWHj7lPwv2+1WwEf4RodMejPheM2IJRo5W
 w4FHmXlVlv4neyjqVzBX/xd/MxfmTRfFT8ulSIUZ0UB7IhV+8LQaambowLAP/yYGFZSR
 evLlCRqp4A45FJwKVHedsTImK6ZvQlAe+EdrEcVEKs3hQ8ENF9XQZoJyzZtHF8gA8tR9
 fCYw==
X-Received: by 10.112.199.230 with SMTP id jn6mr378805lbc.131.1367367218894;
 Tue, 30 Apr 2013 17:13:38 -0700 (PDT)
MIME-Version: 1.0
Sender: juli@clockworksquid.com
Received: by 10.152.28.196 with HTTP; Tue, 30 Apr 2013 17:13:18 -0700 (PDT)
In-Reply-To: <517FE225.6080703@sourcearmory.com>
References: <517FE225.6080703@sourcearmory.com>
From: Juli Mallett <jmallett@FreeBSD.org>
Date: Tue, 30 Apr 2013 17:13:18 -0700
X-Google-Sender-Auth: zfmkB7SGepCSpizm8UUEZcTMgMM
Message-ID: <CACVs6=-W69ZJFo6eVgOquvLSUF2XTemFbK-6=ENz6Trfbog8xQ@mail.gmail.com>
Subject: Re: Capture packets before kernel process
To: wind@sourcearmory.com
Content-Type: text/plain; charset=UTF-8
X-Gm-Message-State: ALoCoQnqKKDDSaXZQTdjkWBC4PeygjAOFxdNe6ijsITV5z6gb66Y3fjb1VIfR1vgMJT7jM3ECbPe
Cc: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 01 May 2013 00:13:46 -0000

On Tue, Apr 30, 2013 at 8:24 AM,  <wind@sourcearmory.com> wrote:
> I need some help, currently I'm working in a project where I want to capture
> and process some network packets before the kernel. I have searched but I
> have found nothing.
>
> Is there some way to capture the packets before the kernel ?

You probably should look at netmap, although you need supported hardware:
- http://info.iet.unipi.it/~luigi/netmap/

It can even be configured so that you can pass some packets on to the
regular kernel network stack, although it's not clear if that's
something you want/need.

Thanks,
Juli.