From owner-freebsd-net@FreeBSD.ORG  Fri Aug 18 07:50:41 2006
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id BAF1516A4E0
	for <freebsd-net@freebsd.org>; Fri, 18 Aug 2006 07:50:41 +0000 (UTC)
	(envelope-from prvs=julian=37832580e@elischer.org)
Received: from a50.ironport.com (a50.ironport.com [63.251.108.112])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5EA6043D98
	for <freebsd-net@freebsd.org>; Fri, 18 Aug 2006 07:50:37 +0000 (GMT)
	(envelope-from prvs=julian=37832580e@elischer.org)
Received: from unknown (HELO [192.168.2.6]) ([10.251.60.70])
	by a50.ironport.com with ESMTP; 18 Aug 2006 00:50:27 -0700
Message-ID: <44E57142.5050809@elischer.org>
Date: Fri, 18 Aug 2006 00:50:26 -0700
From: Julian Elischer <julian@elischer.org>
User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US;
	rv:1.7.13) Gecko/20060414
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Rajkumar S <rajkumars@gmail.com>
References: <64de5c8b0608172319q63497574ue416409bb8b7fa42@mail.gmail.com>
In-Reply-To: <64de5c8b0608172319q63497574ue416409bb8b7fa42@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-net@freebsd.org
Subject: Re: netgraph to userspace?
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Aug 2006 07:50:41 -0000

Rajkumar S wrote:

> Hi,
>
> Is it possible to take a packet from netgraph to userspace and drop it
> there? ie, can I
> insert some netgraph node between say lower and upper of a ng_ether
> push the packets to
> userspace [snort] for some processing and possibly either drop it there?


of course..

man ng_socket

that's one of the main Features of netgraph

>
> I know  that NgSendData and NgRecvData can be used to sent and receive
> data using
> ng_socket, but what I want to confirm is that does these work like a
> man in the middle,
> receiving from one end and sent it to next? And if I receive a packet

you can use two sockets.. attach one to lower and the other to upper.

> and forgets to
> sent, it's effectievly dropped?  yes


>
> With warm regards,
>
> raj
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"