On Feb 22, 2012, at 12:30 AM, Sunny Fugate wrote: > Thanks for the clarification. > > When using a reflection rule behavior, are reflected packets only forwarded > to userland applications listening on the destination interface?
Reflected packet are also forwarded to the application on top of the ring where the "reflect" rule is set (this does not happen if you use forward_packet_and_stop_rule_evaluation) > > Also, can a packet (based on hash filtering) be reflected to multiple > interfaces? Or would this require a plugin and manual copying of packet data? Currently with hash-based filtering you can reflect packets on just one interface. Regards Alfredo > > Thanks again for the speedy response, > > Sunny > > > > > On Feb 21, 2012, at 4:16 PM, Alfredo Cardigliano wrote: > >> Sunny >> >> "forward" to userspace >> "stop" evaluating rules (they are ordered by id) >> "execute" plugin handlers >> "reflect" on another interface >> "bounce" on the same interface swapping mac addresses >> >> You can learn more looking at the sample applications in >> PF_RING/userland/examples/ >> >> Regards >> Alfredo >> >> On Feb 21, 2012, at 11:59 PM, Sunny Fugate wrote: >> >>> I can't find a good description of exactly what the various rule actions >>> do. The documentation just lists them without further explanation. >>> >>> I think that their use isn't at all obvious as the terms "forward", >>> "reflect", "stop", and "continue" are a bit ambiguous without some >>> description. Forward packets to another interface? To userland? Reflect >>> packets and stop sending to userland on the input interface? Reflect >>> packets but keep sending all packets to the input interface? >>> >>> If there is already good documentation on this, someone please point me in >>> the right direction. If not, can someone help define these more precisely >>> for me? >>> >>> >>> forward_packet_and_stop_rule_evaluation, >>> dont_forward_packet_and_stop_rule_evaluation, >>> execute_action_and_continue_rule_evaluation, >>> forward_packet_add_rule_and_stop_rule_evaluation, >>> reflect_packet_and_stop_rule_evaluation, >>> reflect_packet_and_continue_rule_evaluation, >>> bounce_packet_and_stop_rule_evaluation, >>> bounce_packet_and_continue_rule_evaluation >>> >>> >>> Thanks, >>> >>> Sunny >>> _______________________________________________ >>> Ntop-misc mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
