Re: Tracking iterations in net_bh

[Rusty Russell <rusty@xxxxxxxxxxxxxxxx>]

In message <Pine.LNX.4.10.9912182240560.16239-100000@xxxxxxxxxxxxxx> you write:
> Greetings,
> 
> I have a kernel application (firewall driver) which wants to be able to
> tell if, for example, the packet I am looking at in the output chain is the
> same one that came in on the input chain.

This is hard ATM: consider fragmentation.  Other than this, you can
use the nf_mark/fwmark field.

If the router plugin architecture suggested goes in 2.5, then tracking
packets could be one side effect, since the frag code could keep this
association intact:

        http://arl.wustl.edu/~dan/papers/rt_plugins_sigcomm98.pdf

Rusty.
--
Hacking time.