Yes,I use the Makefile you posted on trac.
But I can still surf webs after this :
iptables -I OUTPUT -m ndpi --http -j REJECT
This means it's not working properly?
------------------ Original ------------------
From: "Thomas Heil"<[email protected]>;
Date: Mon, Dec 17, 2012 05:21 PM
To: "openwrt-devel"<[email protected]>;
Subject: Re: [OpenWrt-Devel] new package ndpi-netfilter
Hi,
On 12/17/12 05:41, Vince Huang wrote: I have compiled it
without error.But how can I test if it is working properly?Give some
commands,please.
Under https://dev.openwrt.org/ticket/12598 you will find a much
cleaner patch and some hints.
the package were renamed to iptables-mod-ndpi and kmod-ipmt-ndpi.
--
iptables -m ndpi --help
--
and for example
iptables -I OUTPUT -m ndpi --http -j REJECT
to block outgoing http traffic. It could then also be interesting to use
use for traffic shaping rules or in conjunction with collectd to have a look
what kind of traffic is on your net. cheers thomas
------------------ Original ------------------
From: "Thomas
Heil"<[email protected]>;
Date: Sat, Dec 8, 2012 04:51 AM
To: "OpenWrt Development
List"<[email protected]>;
Subject: [OpenWrt-Devel] new package ndpi-netfilter
Hi,
Here is ndpi-netfilter, a GPL implementation of an iptables and
netfilter module for
nDPI integration into the Linux kernel.
If you find it useful, please integrate it.
--
#
# Copyright (C) 2010 OpenWrt.org
#
# This is free software, licensed under the GNU General Public
License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=ndpi-netfilter
PKG_REV:=5847
PKG_RELEASE:=2
PKG_VERSION:=1.0
PKG_SOURCE:=ndpi-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://svn.ntop.org/svn/ntop/trunk/nDPI
PKG_SOURCE_SUBDIR:=ndpi-netfilter-$(PKG_VERSION)
PKG_SOURCE_VERSION:=$(PKG_REV)
PKG_SOURCE_PROTO:=svn
include $(INCLUDE_DIR)/package.mk
#PKG_FIXUP:=autoreconf
PKG_FIXUP:=libtool
define Package/ndpi-netfilter
SUBMENU:=Firewall
SECTION:=net
CATEGORY:=Network
TITLE:=ndpi successor of OpenDPI
URL:=http://www.ntop.org/products/ndpi/
DEPENDS:=+iptables +iptables-mod-conntrack-extra
endef
define Package/ndpi-netfilter/description
nDPI is a ntop-maintained superset of the popular OpenDPI
library
endef
CONFIGURE_VARS:= \
CC="$(TARGET_CC)" \
LD="$(TARGET_LD)" \
LIBTOOL="$(STAGING_DIR)/host/bin/libtool"
CONFIGURE_ARGS := \
$(filter-out --disable-nls,$(CONFIGURE_ARGS)) \
--with-pic \
TARGET_LDFLAGS += -L$(STAGING_DIR)/usr/lib/libiconv-full/lib
-L$(STAGING_DIR)/usr/lib -lc -L$(TOOLCHAIN_DIR)
define Build/Prepare
$(call Build/Prepare/Default)
rm -rf $(PKG_BUILD_DIR)/ndpi-netfilter
git clone https://github.com/ewildgoose/ndpi-netfilter
$(PKG_BUILD_DIR)/ndpi-netfilter
endef
define Build/Compile
$(MAKE) -C $(PKG_BUILD_DIR) \
DESTDIR="$(PKG_INSTALL_DIR)" \
CC="$(TARGET_CC)" \
CFLAGS="$(TARGET_CFLAGS) $(TARGET_CPPFLAGS) $(FPIC)
-I$(STAGING_DIR)/usr/include" \
LD="$(TARGET_LD)" \
CROSS_COMPILE="$(TARGET_CROSS)" \
LDFLAGS="$(TARGET_LDFLAGS)" \
all
$(MAKE) -C $(PKG_BUILD_DIR)/ndpi-netfilter \
ARCH="$(LINUX_KARCH)" \
CC="$(TARGET_CC)" \
LDFLAGS="$(TARGET_LDFLAGS) -L$(STAGING_DIR)/usr/lib" \
LD="$(TARGET_LD)" \
NDPI_PATH=$(PKG_BUILD_DIR) \
KERNEL_DIR=$(LINUX_DIR) \
$(TARGET_CONFIGURE_OPTS) \
STAGING_DIR="$(STAGING_DIR)" \
CROSS_COMPILE="$(TARGET_CROSS)" \
CFLAGS="$(TARGET_CFLAGS) $(TARGET_CPPFLAGS) $(FPIC)
-I$(STAGING_DIR)/usr/include
-I$(PKG_BUILD_DIR)/ndpi-netfilter/src
-I$(PKG_BUILD_DIR)/src/include" \
all
endef
define Package/ndpi-netfilter/install
mkdir -p $(1)/usr/lib/iptables
$(CP) $(PKG_BUILD_DIR)/ndpi-netfilter/ipt/libxt_ndpi.so
$(1)/usr/lib/iptables
endef
include $(INCLUDE_DIR)/kernel.mk
define KernelPackage/ipt-ndpi
SUBMENU:=Netfilter Extensions
TITLE:= nDPI net netfilter module
DEPENDS:=+kmod-ipt-compat-xtables +libpcap +ndpi-netfilter
KCONFIG:=CONFIG_NF_CONNTRACK \
CONFIG_NF_CONNTRACK_EVENTS=y
FILES:= \
$(PKG_BUILD_DIR)/ndpi-netfilter/src/xt_ndpi.ko
AUTOLOAD:=$(call AutoLoad,46,xt_ndpi)
endef
$(eval $(call BuildPackage,ndpi-netfilter))
$(eval $(call KernelPackage,ipt-ndpi))
--
cheers
thomas
_______________________________________________
openwrt-devel mailing list
[email protected]
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
_______________________________________________ openwrt-devel mailing
list [email protected]
https://lists.openwrt.org/mailman/listinfo/openwrt-devel_______________________________________________
openwrt-devel mailing list
[email protected]
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
