filtering - How to implement a fast packet filter with nfqueue -
i want implement fast packet filter check packet's payload. if content of payload match string, dropped. have implemented nfqueue program. however, speed slow because packet copied. lower latency of filter, try use memory-mapping skill.
i followed chamaken's nl-mmap example modify program , install src , lib. didn't speed up. wondering know if configure setting of nl-mmap correctly? there other things do?
here link: https://github.com/chamaken/libmnl/releases/tag/nl-mmap-master
also, test "mmap i/o nflog daemon in userspace using libmnl/nl-mmap", not work.
link:https://www.pacificsimplicity.ca/blog/mmap-io-nflog-daemon-userspace-using-libmnlnl-mmap
is there other way doing this?
Comments
Post a Comment