[Planetlab-users] how to recognise packets generated inside a guest

[Giovanni Di Stasi]

Il Wednesday 23 January 2008 17:14:17 Giovanni Di Stasi ha scritto:
> Hi everyone,
> I need to recognise packets generated inside a host, so that I can apply
> some iptables rules to them.
>
> I seem to remember that packets generated by a host are marked, so that
> they can be recognised by "-m connmark --mark" of iptables. However I did
> some tests using the nid of the guest as mark, but packets didn't get
> caught.
>
> Second question: I also need to capture the packets (still generated inside
> a guest) with an "ip rule" rule, in order to route that packets with a
> different routing table. Does the mark apply in this case?
>

Sorry, where I said host, I meant guest.