[Planetlab-users] how to recognise packets generated inside a guest

[Giovanni Di Stasi]

Hi everyone,
I need to recognise packets generated inside a host, so that I can apply some 
iptables rules to them.

I seem to remember that packets generated by a host are marked, so that they 
can be recognised by "-m connmark --mark" of iptables. However I did some 
tests using the nid of the guest as mark, but packets didn't get caught.

Second question: I also need to capture the packets (still generated inside a 
guest) with an "ip rule" rule, in order to route that packets with a 
different routing table. Does the mark apply in this case?

Thanks.