Thanks for the clarification.  

When using a reflection rule behavior, are reflected packets only forwarded to 
userland applications listening on the destination interface? 

Also, can a packet (based on hash filtering) be reflected to multiple 
interfaces? Or would this require a plugin and manual copying of packet data? 

Thanks again for the speedy response, 

Sunny




On Feb 21, 2012, at 4:16 PM, Alfredo Cardigliano wrote:

> Sunny
> 
> "forward" to userspace
> "stop" evaluating rules (they are ordered by id)
> "execute" plugin handlers
> "reflect" on another interface
> "bounce" on the same interface swapping mac addresses
> 
> You can learn more looking at the sample applications in 
> PF_RING/userland/examples/
> 
> Regards
> Alfredo
> 
> On Feb 21, 2012, at 11:59 PM, Sunny Fugate wrote:
> 
>> I can't find a good description of exactly what the various rule actions do. 
>>  The documentation just lists them without further explanation.  
>> 
>> I think that their use isn't at all obvious as the terms "forward", 
>> "reflect", "stop", and "continue" are a bit ambiguous without some 
>> description. Forward packets to another interface? To userland?   Reflect 
>> packets and stop sending to userland on the input interface?  Reflect 
>> packets but keep sending all packets to the input interface?  
>> 
>> If there is already good documentation on this, someone please point me in 
>> the right direction.  If not, can someone help define these more precisely 
>> for me? 
>> 
>> 
>>           forward_packet_and_stop_rule_evaluation,
>>           dont_forward_packet_and_stop_rule_evaluation,
>>           execute_action_and_continue_rule_evaluation,
>>           forward_packet_add_rule_and_stop_rule_evaluation,
>>           reflect_packet_and_stop_rule_evaluation,
>>           reflect_packet_and_continue_rule_evaluation,
>>           bounce_packet_and_stop_rule_evaluation,
>>           bounce_packet_and_continue_rule_evaluation
>> 
>> 
>> Thanks, 
>> 
>> Sunny
>> _______________________________________________
>> Ntop-misc mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
> 
> _______________________________________________
> Ntop-misc mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Reply via email to