From owner-freebsd-net@FreeBSD.ORG Wed May 1 23:16:11 2013 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 2D8102A2 for ; Wed, 1 May 2013 23:16:11 +0000 (UTC) (envelope-from barney_cordoba@yahoo.com) Received: from nm15-vm3.bullet.mail.ne1.yahoo.com (nm15-vm3.bullet.mail.ne1.yahoo.com [98.138.91.145]) by mx1.freebsd.org (Postfix) with ESMTP id CDE55186F for ; Wed, 1 May 2013 23:16:10 +0000 (UTC) Received: from [98.138.226.180] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 01 May 2013 23:13:44 -0000 Received: from [98.138.86.156] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 01 May 2013 23:13:44 -0000 Received: from [127.0.0.1] by omp1014.mail.ne1.yahoo.com with NNFMP; 01 May 2013 23:13:44 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: 276788.40099.bm@omp1014.mail.ne1.yahoo.com Received: (qmail 52429 invoked by uid 60001); 1 May 2013 23:13:44 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1367450024; bh=JQbIeWoRCakAYxJVTe27Nh/CcV06IugibgEZ319zSGQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=E+aILbe6CmCQWzZ7fEKBuACNHM8zgU+9K6Vc0AvM54f4gN8mX2i/upEjwesKsbjq3gyaL9MhB5hfm6JXqranTy89GqS/76ncGBJpvumjhuwepbHflfpLNN/JiXVLScKPnGd+Qt24XkmXCgFGxlB3RRnVozmhbLgePOLQDP6vHEI= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=BbGZ49Uz8UNHuwJA2yv/urr3/T/LaLgdii/a8u2iI2/pHqAkgJJszU/HGjBfNaeEksL+mbEASvJok9CQF+tSmXdugO6UP6PFB7J50YM7MKdNmsFcDT1CwIzOIJ988TNTGw2YoIlSW0IClagrVz7oFby1int+KFLewckWs3TeVDM=; X-YMail-OSG: 5IyDktYVM1mrB.NXLVUxQJDZQ0AxpL3VQqbar.MeKEKTZMd G6PmZ2fFULGzqvN86fmGcot374nK_vuLa2_VOp4BupIi66.FV_OLmkX.dBoS MDb8RnrQQW1u8i8BlKTtJ.REQyLPJJyZazMcPBKKi3UgbQyqUBRBv6hHaNf3 I.RsZ8QN1cW5eXy4Ffec6iiP4EwihPO7J9KyTbyi8aiJD.1LmlWAa.jNsJ8F MpilRHcLAmpVGO0G2OFCzy0_H51TQBbW5KFxGybDc6SjcLaZWdUlQre.aKrK Ck1.TReVSZO4U5xvmK.fRDKptdKcNlQHQEsjcR3doleFNpWkKAYN7sPNdd8w JsM0OfDgB5PtGYxbzwVS.Ir8jIUOGlmnNQIsU34q5KzXI_4MDtKi_xBONsIx NjnKGg2TgVaof2P5o55DDwiLYOoym9AKYMrSaCvByFQg89Nuq22SI4a8EVK8 7C6EnUx.VH9XzHMac8aQ_5eFA3oppa8TyGzBDAUucqoMBOD3q7biPfOblxQo OEwY2G3g- Received: from [98.203.118.124] by web121605.mail.ne1.yahoo.com via HTTP; Wed, 01 May 2013 16:13:43 PDT X-Rocket-MIMEInfo: 002.001, Ci0tLSBPbiBUdWUsIDQvMzAvMTMsIHdpbmRAc291cmNlYXJtb3J5LmNvbSA8d2luZEBzb3VyY2Vhcm1vcnkuY29tPiB3cm90ZToKCj4gRnJvbTogd2luZEBzb3VyY2Vhcm1vcnkuY29tIDx3aW5kQHNvdXJjZWFybW9yeS5jb20.Cj4gU3ViamVjdDogQ2FwdHVyZSBwYWNrZXRzIGJlZm9yZSBrZXJuZWwgcHJvY2Vzcwo.IFRvOiBmcmVlYnNkLW5ldEBmcmVlYnNkLm9yZwo.IERhdGU6IFR1ZXNkYXksIEFwcmlsIDMwLCAyMDEzLCAxMToyNCBBTQo.IEhpIQo.IAo.IEkgbmVlZCBzb21lIGhlbHAsIGN1cnJlbnRseSABMAEBAQE- X-Mailer: YahooMailClassic/15.1.8 YahooMailWebService/0.8.141.536 Message-ID: <1367450023.38176.YahooMailClassic@web121605.mail.ne1.yahoo.com> Date: Wed, 1 May 2013 16:13:43 -0700 (PDT) From: Barney Cordoba Subject: Re: Capture packets before kernel process To: freebsd-net@freebsd.org, wind@sourcearmory.com MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 May 2013 23:16:11 -0000 --- On Tue, 4/30/13, wind@sourcearmory.com wrote: > From: wind@sourcearmory.com > Subject: Capture packets before kernel process > To: freebsd-net@freebsd.org > Date: Tuesday, April 30, 2013, 11:24 AM > Hi! > > I need some help, currently I'm working in a project where I > want to capture and process some network packets before the > kernel. I have searched but I have found nothing. > > Is there some way to capture the packets before the kernel > ? You want to wedge your code to the if_input routine. Then pass the mbuf to the original if_input routine. BC