Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 02 May 2013 11:28:47 +0800
From:      Julian Elischer <julian@freebsd.org>
To:        Barney Cordoba <barney_cordoba@yahoo.com>
Cc:        freebsd-net@freebsd.org, wind@sourcearmory.com
Subject:   Re: Capture packets before kernel process
Message-ID:  <5181DD6F.3090404@freebsd.org>
In-Reply-To: <1367450023.38176.YahooMailClassic@web121605.mail.ne1.yahoo.com>
References:  <1367450023.38176.YahooMailClassic@web121605.mail.ne1.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 5/2/13 7:13 AM, Barney Cordoba wrote:
> --- On Tue, 4/30/13, wind@sourcearmory.com <wind@sourcearmory.com> wrote:
>
>> From: wind@sourcearmory.com <wind@sourcearmory.com>
>> Subject: Capture packets before kernel process
>> To: freebsd-net@freebsd.org
>> Date: Tuesday, April 30, 2013, 11:24 AM
>> Hi!
>>
>> I need some help, currently I'm working in a project where I
>> want to capture and process some network packets before the
>> kernel. I have searched but I have found nothing.
>>
>> Is there some way to capture the packets before the kernel
>> ?
> You want to wedge your code to the if_input routine. Then pass the mbuf
> to the original if_input routine.
there is a netgraph hook there.

man netgraph
>
> BC
>
>
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
>




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5181DD6F.3090404>