x-way/iptables-tracer x-way/iptables-tracer

  • Stars
    star
    255
  • Rank 159,729 (Top 4 %)
  • Language
    Go
  • License
    MIT License
  • Created about 6 years ago
  • Updated 3 months ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
x-way/iptables-tracer
github

x-way

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Insert trace-points into the running configuration to observe the path of packets through the iptables chains.

iptables-tracer

CircleCI Go Report Card Codecov

Insert trace-points into the running configuration to observe the path of packets through the iptables chains.

Usage

$ iptables-tracer -f "-s 192.0.2.1 -p tcp --dport 443" -t 30s
14:42:00.284882 raw    PREROUTING   0x00000000 IP 192.0.2.1.36028 > 203.0.113.41.443: Flags [S], seq 3964691400, win 29200, length 0  [In:eth0 Out:]
14:42:00.287255 mangle PREROUTING   0x00008000 IP 192.0.2.1.36028 > 203.0.113.41.443: Flags [S], seq 3964691400, win 29200, length 0  [In:eth0 Out:]
14:42:00.288966 nat    PREROUTING   0x00008000 IP 192.0.2.1.36028 > 203.0.113.41.443: Flags [S], seq 3964691400, win 29200, length 0  [In:eth0 Out:]
14:42:00.290545 mangle FORWARD      0x00008000 IP 192.0.2.1.36028 > 198.51.100.8.443: Flags [S], seq 3964691400, win 29200, length 0  [In:eth0 Out:eth1]
14:42:00.292123 filter FORWARD      0x00008002 IP 192.0.2.1.36028 > 198.51.100.8.443: Flags [S], seq 3964691400, win 29200, length 0  [In:eth0 Out:eth1]
14:42:00.293164 mangle POSTROUTING  0x00008002 IP 192.0.2.1.36028 > 198.51.100.8.443: Flags [S], seq 3964691400, win 29200, length 0  [In: Out:eth1]
14:42:00.293780 nat    POSTROUTING  0x00008002 IP 192.0.2.1.36028 > 198.51.100.8.443: Flags [S], seq 3964691400, win 29200, length 0  [In: Out:eth1]

More Repositories

1

crawlerdetect

Golang module to detect bots and crawlers via the user agent
Go
54
star
2

ngx_http_remote_passwd

Nginx module which makes the Basic Auth password available as variable $remote_passwd
C
9
star
3

ip_compact

Compact a list of IP prefixes
Go
6
star
4

ctrmd

Conntrack entry removal daemon
Go
6
star
5

puppet-mikrotik

Puppet network device extensions for Mikrotik
Ruby
4
star
6

ngx_http_header_inspect

Nginx module which inspects HTTP headers
C
4
star
7

pktdump

Format gopacket.Packet network packets similar to the tcpdump CLI output
Go
4
star
8

vtysock

a quick vtysh replacement
Go
3
star
9

havp-templates

Some nice-looking templates for HAVP
3
star
10

mt-set-time

Set time on MikroTik routers
Go
2
star
11

ip_match

Match IP addresses against a list of prefixes
Go
2
star
12

homebrew-mutt

Ruby
2
star
13

ip_diff

Compare two lists of IP prefixes
Go
2
star
14

qr-bag

Generate a QR code with a lost bag logo in the middle pointing to a URL with information about the owner
Go
1
star
15

ipaddr

ipaddr - human friendly list of IP addresses and network interfaces
Go
1
star
16

dotfiles

Vim Script
1
star
17

dnsupd

A small and simple DynDNS server
Go
1
star
18

puppet-interfaces

Puppet module to manage /etc/network/interfaces
Ruby
1
star
19

ipsecdump

Dump incoming IPSec packets after they have been decrypted by the kernel
Go
1
star
20

7in7

Seven Languages in Seven Weeks
1
star
21

nflog_sniff

Packet sniffing with NFLOG
C++
1
star
22

jekyll-cased-categories

A plugin to keep categories case-sensitive in Jekyll 3.0 and above.
Ruby
1
star
23

puppet-monit

Puppet module for monit
Puppet
1
star