Re: [Divert] Linux 2.4.x kernel?

[Jan <Jan...@cr...>]

I would say that netfiter can do almost the same as divert sockets. But
there is a major difference.
When using netfilter you can  modify and remove packets in the packet
stream.
When using divert sockets you can modify, remove and inject packets in the
packet stream.
The packet injection is a very important feature for some uses.

Unfortunately you cannot do that with netfilter in the Linux 2.4 kernel.
When a packet pops from the kernel to userspace using netfilter, the user
space application may either ignore it (remove it from the packet stream)
or modify it. You cannot inject a packet without receiving one first.

It would infact be nice if divert would be ported to Linux 2.4 or if
netfilter would allow packet injection.

-- J. Miller


-------------------------------------------------------------------------
Divert Sockets for Linux List
mailto:di...@li...
http://www.anr.mcnc.org/~divert
-------------------------------------------------------------------------