Netfilter内核模块迁移到4.1.23 - 无法检索IP标头

我们有一个2.6内核的netfilter内核模块，现在移植到4.1.23。我的钩子功能看起来破碎。我无法检索数据包标题。Netfilter内核模块迁移到4.1.23 - 无法检索IP标头

这是2.6内核的代码片段。这是长时间的生产。

static unsigned int main_hook(unsigned int hooknum, struct sk_buff *skb, const struct net_device *in,const struct net_device *out, int (*okfn)(struct sk_buff*)) 
{ 
    //struct sk_buff *skb = (skb_p); 
    struct iphdr *ih = (struct iphdr *)(skb->data); 
    u32 saddr = ih->saddr; 
    u32 daddr = ih->daddr;

经过netfilter.h中搜查互联网在4.1.23

static unsigned int main_hook(const struct nf_hook_ops *ops, struct sk_buff *skb, const struct nf_hook_state *state) 
     { 
      //struct sk_buff *skb = (skb_p); 
      struct iphdr *ih = (struct iphdr *)(skb->data); 
      u32 saddr = ih->saddr; 
      u32 daddr = ih->daddr;

注册钩以下如下到达。

netfilter_ops.hook    =  main_hook; 
    netfilter_ops.pf    =  PF_INET; 
    netfilter_ops.hooknum   =  NF_INET_FORWARD; 
    netfilter_ops.priority   =  NF_IP_PRI_FIRST; 
    netfilter_ops.owner    =  THIS_MODULE; 
    nf_register_hook(&netfilter_ops);

我没有从saddr和daddr获取源IP和目标IP。

删除一切并尝试以下

static unsigned int main_hook(const struct nf_hook_ops *ops, struct sk_buff *skb, const struct nf_hook_state *state) 
{ 
    struct iphdr *ip_header = (struct iphdr *) (skb->data); 
    unsigned int src_ip = (unsigned int)ip_header->saddr; 
    unsigned int dest_ip = (unsigned int)ip_header->daddr; 
    printk("IP addres = %pI4 DEST = %pI4\n", &src_ip, &dest_ip); 
    return NF_ACCEPT;

下面是结果

[37501.345997] IP addres = 0.0.0.0 DEST = 0.0.0.0 
[37506.337854] IP addres = 0.0.0.0 DEST = 0.0.0.0 
[37511.345295] IP addres = 0.0.0.0 DEST = 0.0.0.0 
[37516.337132] IP addres = 0.0.0.0 DEST = 0.0.0.0 
[37521.344589] IP addres = 0.0.0.0 DEST = 0.0.0.0 
[37526.336426] IP addres = 0.0.0.0 DEST = 0.0.0.0 
[37531.343866] IP addres = 0.0.0.0 DEST = 0.0.0.0

尝试以下过，但得到的垃圾

buff = (unsigned char *) skb->data; 
for (i=0;i<60;i++) printk("%d.", buff[i]); 
printk("\n");

我试着用函数来获得数据（skb_network_header），甚至尝试写出你好的世界。请帮忙。

来源

2017-04-24 M Rusedski

尝试提取物是这样的：

struct iphdr *ip_hdr = (struct iphdr *)skb_network_header(skb);

和访问是这样的：

printk("IP addres = %u DEST = %u\n", ip_hdr->saddr, ip_hdr->daddr);

来源

2017-05-07 19:14:45

Netfilter内核模块迁移到4.1.23 - 无法检索IP标头

回答

相关问题