[问题求助]如何在程序中获得Iptables规则表中每条的数据包计数信息？ [复制链接]

不知道iptab.le -L获得规则相关信息存.储在内核空间哪儿？.

我现在想获取到用户空间.，特别是获取每条规则的.过滤数据包信息.

麻烦各位提示一下。

因为我没时间去研究netfilter-iptables.框架机制。.。。    健康

iptables -vL (-t xxx)
iptables -vnL (-t xxx)

-t xxx 表示什么意思

我是在要在程序中获得这些信息

iptables -vL 可以获得输出在控制台

难道去分析其输出结果？

man iptables


QUOTE:       -t, --table table
              This  option  specifies the packet matching table which the com-
              mand should operate on.  If the kernel is configured with  auto-
              matic module loading, an attempt will be made to load the appro-
              priate module for that table if it is not already there.

              The tables are as follows:

              filter:
                  This is the default table (if no -t option is  passed).   It
                  contains  the built-in chains INPUT (for packets coming into
                  the box itself), FORWARD (for packets being  routed  through
                  the box), and OUTPUT (for locally-generated packets).

              nat:
                  This  table  is  consulted  when a packet that creates a new
                  connection is encountered.  It consists of three  built-ins:
                  PREROUTING  (for  altering packets as soon as they come in),
                  OUTPUT (for altering locally-generated packets before  rout-
                  ing),  and  POSTROUTING  (for  altering  packets as they are
                  about to go out).

              mangle:
                  This table is used for specialized packet alteration.  Until
                  kernel  2.4.17  it  had two built-in chains: PREROUTING (for
                  altering incoming packets before routing)  and  OUTPUT  (for
                  altering  locally-generated  packets before routing).  Since
                  kernel 2.4.18, three other built-in  chains  are  also  sup-
                  ported: INPUT (for packets coming into the box itself), FOR-
                  WARD (for altering packets being routed  through  the  box),
                  and  POSTROUTING  (for altering packets as they are about to
                  go out).


如果你要在程序里获得这些信息，就写个程序去获得啊，比如shell什么的

完全听不懂

platinum版主还是没有回答我的问题啊？

你的意思还是说要我去分析通过iptables 接口命令

读出来的数据呢

不过这的确也是一种思路

iptables -vL >; outfile.temp