From owner-freebsd-isp@FreeBSD.ORG Sun Feb 22 15:17:42 2004 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E1DBB16A4CE; Sun, 22 Feb 2004 15:17:42 -0800 (PST) Received: from rwcrmhc11.comcast.net (rwcrmhc11.comcast.net [204.127.198.35]) by mx1.FreeBSD.org (Postfix) with ESMTP id D76F743D1D; Sun, 22 Feb 2004 15:17:42 -0800 (PST) (envelope-from julian@elischer.org) Received: from interjet.elischer.org ([24.7.73.28]) by comcast.net (rwcrmhc11) with ESMTP id <2004022223173801300dbfk1e>; Sun, 22 Feb 2004 23:17:42 +0000 Received: from localhost (localhost.elischer.org [127.0.0.1]) by InterJet.elischer.org (8.9.1a/8.9.1) with ESMTP id PAA52472; Sun, 22 Feb 2004 15:17:38 -0800 (PST) Date: Sun, 22 Feb 2004 15:17:38 -0800 (PST) From: Julian Elischer To: Vasenin Alexander aka BlackSir In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-isp@freebsd.org cc: "Bjoern A. Zeeb" cc: Gleb Smirnoff cc: freebsd-net@freebsd.org Subject: RE: ng_netflow: testers are welcome X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Feb 2004 23:17:43 -0000 you can open a divert socket as a netgraph node by openning a ksocket node with protocol 'divert'. On Sun, 22 Feb 2004, Vasenin Alexander aka BlackSir wrote: > Yep... But it not so obvious for man like me, who thought just a week ago > that netgraph is something beetween net & graphics... like MRTG > LOL > > Another question: > Is is possible that ng_netflow take packets _after_ they are diverted by > natd? I apologise, that this would require divert implemented as netgraph > node? So... I have no idea how this would work with ipfw ruleset... Any > ideas? > > > -----Original Message----- > > From: owner-freebsd-isp@freebsd.org > > [mailto:owner-freebsd-isp@freebsd.org]On Behalf Of Gleb Smirnoff > > Sent: Sunday, February 22, 2004 2:58 AM > > To: Julian Elischer > > Cc: freebsd-isp@freebsd.org; Bjoern A. Zeeb; Vasenin Alexander aka > > BlackSir; freebsd-net@freebsd.org > > Subject: Re: ng_netflow: testers are welcome > > > Is it possible to make port dependant on kernel module > > shipped with base system? How? > > For example sysutils/ips is not dependant on ipfw. It is obvious > > that ipfw is required for it, as well as in case of netgraph > > and ng_netflow. > >