netfilter 架构分析.docVIP

Netfilter 架构分析--基于Linux 3.2.0 全局图 在文件net/netfilter/core.c中定义了一全局变量nf_hooks，用于记录钩子点。nf_hooks第一维代表协议数，第二维代表钩子数。 struct list_head nf_hooks[NFPROTO_NUMPROTO][NF_MAX_HOOKS] __read_mostly; EXPORT_SYMBOL(nf_hooks); nf_hooks nf_register_hook() nf_hook_ops list hook owner pf hooknum priority list valid_hooks private me af priority name size number initial_entries hook_entry underflow stacksize stackptr jumpstack entries ipt_entry ip nfcache target_offset next_offset comefrom counters elems[0] xt_e