<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>THE ENCYCLOPEDIA &#187; l7-filter</title>
	<atom:link href="http://blog.mrcongwang.com/tag/l7-filter/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.mrcongwang.com</link>
	<description>Of A Young Computer Science Graduate Student</description>
	<lastBuildDate>Mon, 17 May 2010 03:58:19 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>L7-filter uncompilation due to API changes in libnetfilter_conntrack-0.0.100</title>
		<link>http://blog.mrcongwang.com/2009/07/16/l7-filter-uncompilation-due-to-api-changes-in-libnetfilter_conntrack-0-0-100/</link>
		<comments>http://blog.mrcongwang.com/2009/07/16/l7-filter-uncompilation-due-to-api-changes-in-libnetfilter_conntrack-0-0-100/#comments</comments>
		<pubDate>Thu, 16 Jul 2009 20:30:50 +0000</pubDate>
		<dc:creator>silwings</dc:creator>
				<category><![CDATA[Multi-threaded L7-Filter]]></category>
		<category><![CDATA[conntrack]]></category>
		<category><![CDATA[l7-filter]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[netfilter]]></category>

		<guid isPermaLink="false">http://blog.mrcongwang.com/?p=204</guid>
		<description><![CDATA[Changes of API made to the libnetfilter_conntrack-0.0.100
newly published on July, 16th will
lead to a problem when compiling l7-filter-user-space.
Affected interfaces are :
nfct_sprintf_protocol
nfct_sprintf_address
nfct_sprintf_proto
nfct_conntrack_free
nfct_register_callback
nfct_event_conntrack
Affected data structures are :
NFCT_MSG_DESTROY
NFCT_MSG_NEW
NFCT_MSG_UPDATE
NFCT_MSG_UNKNOWN
NFCT_MSG_NEW
NFCT_MSG_DESTROY
]]></description>
		<wfw:commentRss>http://blog.mrcongwang.com/2009/07/16/l7-filter-uncompilation-due-to-api-changes-in-libnetfilter_conntrack-0-0-100/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Netfilter Queue Howto</title>
		<link>http://blog.mrcongwang.com/2009/07/13/netfilter-queue-howto/</link>
		<comments>http://blog.mrcongwang.com/2009/07/13/netfilter-queue-howto/#comments</comments>
		<pubDate>Mon, 13 Jul 2009 15:59:01 +0000</pubDate>
		<dc:creator>silwings</dc:creator>
				<category><![CDATA[Multi-threaded L7-Filter]]></category>
		<category><![CDATA[l7-filter]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[netfilter]]></category>

		<guid isPermaLink="false">http://blog.mrcongwang.com/?p=156</guid>
		<description><![CDATA[Extensions
通过加载extensions可以获得specified options 例如tcp extensions:

&#8211;tcp-flags
&#8211;syn
&#8211;source-port
&#8211;sport
&#8211;destination-port
&#8211;dport
&#8211;tcp-option

Targets
iptables -A INPUT -j QUEUE
macth到的包都送去queue这个chain去比较



QUEUE is a special target, which queues the packet for userspace processing. For this to be useful, two further components are required:


a &#8220;queue handler&#8221;, which deals with the actual mechanics of passing packets between the kernel and userspace; and
a userspace application to receive, possibly manipulate, and issue verdicts [...]]]></description>
		<wfw:commentRss>http://blog.mrcongwang.com/2009/07/13/netfilter-queue-howto/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

