This is automatically generated documentation. Edit after the "COMMENTS" heading; changes to the main body will be lost.
KernelFilter Element Documentation
NAME
KernelFilter -- Click element; block kernel from handling packets
SYNOPSIS
KernelFilter(FILTERSPEC, ...)
Ports: none
Drivers: userlevel
Package: userlevel (core)
DESCRIPTION
The KernelFilter element installs filter rules in the kernel to stop the kernel from handling certain types of packets. Use this in combination with FromDevice.u to handle packets in user-level Click configurations. KernelFilter uses iptables(1) to install filters; if your system does not support iptables(1), KernelFilter will fail. KernelFilter uninstalls its firewall rules when Click shuts down. If Click shuts down uncleanly, for instance because of a segmentation fault or 'kill -9', then the rules will remain in place, and you'll have to remove them yourself. Currently only one form of FILTERSPEC is understood.
- '
drop dev DEVNAME' - The kernel is blocked from handling any packets arriving on device DEVNAME. However, these packets will still be visible to tcpdump(1), and to Click elements like FromDevice.u.
SEE ALSO
FromDevice.u, ToDevice.u, KernelTap, ifconfig(8)
Generated by 'click-elem2man' from '../elements/userlevel/kernelfilter.hh' on 18/Sep/2007.
