Question about nf_hookfn

Question about nf_hookfn

[Emmanuel Fleury]

Hi all,

I would like to know more about the last argument of the function
nf_hookfn defined in /usr/src/linux/include/linux/netfilter.h.

Basically, you have:

typedef unsigned int nf_hookfn(unsigned int hooknum,
                               struct sk_buff **skb,
                               const struct net_device *in,
                               const struct net_device *out,
                               int (*okfn)(struct sk_buff *));

I got all the other arguments but the last one...

What is it for ???

Regards
-- 
Emmanuel

Modern technology just makes people try to do everything at once.
  -- Calvin & Hobbes (Bill Waterson)

Re: Question about nf_hookfn

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 985 bytes --]

On Fri, Oct 10, 2003 at 05:14:05PM +0200, Emmanuel Fleury wrote:
> typedef unsigned int nf_hookfn(unsigned int hooknum,
>                                struct sk_buff **skb,
>                                const struct net_device *in,
>                                const struct net_device *out,
>                                int (*okfn)(struct sk_buff *));
> 
> I got all the other arguments but the last one...
> 
> What is it for ???

it is the function that gets called if the packet is to continue (i.e. when the
registered function returns NF_ACCEPT).

> Regards
> -- 
> Emmanuel


-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]