ubuntu14.04 xt_TEE and iptables

最新推荐文章于 2026-06-21 09:53:37 发布

原创最新推荐文章于 2026-06-21 09:53:37 发布 · 3k 阅读

0 ·

本内容遵循CC 4.0 BY-SA版权协议

本文通过实例展示了如何使用iptables的TEE目标来克隆并转发数据包到特定的网络接口eth1。通过对iptables规则的配置，详细记录了数据包在不同阶段被克隆和转发的过程，并验证了其正确性。

开发板推荐：天空星STM32F407VET6开发板

超高性价比 STM32主控 | 超高主频 | 一板兼容百芯 | 比赛神器 | 沉金彩色丝印

点击查看

1. a host
+-----------------------------------------+
|eth0 eth1 |
|128.224.162.180 up |
+-----------------------------------------+

modprobe xt_TEE

iptables -t mangle -I POSTROUTING -j TEE --gateway 10.0.0.8 -o eth1

iptables -t mangle -I PREROUTING -j TEE --gateway 10.0.0.8

iptables -t mangle -I INPUT -j TEE --gateway 10.0.0.8

iptables -t mangle -I FORWARD -j TEE --gateway 192.168.1.60 -o eth1

iptables -t mangle -I OUTPUT -j TEE --gateway 192.168.1.60 -o eth1

run "ping 128.224.162.1"
run "tcpdump -ni eth1 icmp"

We will find the following messages:

...
15:25:01.016549 IP 128.224.162.1 > 128.224.162.180: ICMP echo reply, id 13292, seq 227, length 64
15:25:02.016158 IP 128.224.162.180 > 128.224.162.1: ICMP echo request, id 13292, seq 228, length 64
15:25:02.016546 IP 128.224.162.1 > 128.224.162.180: ICMP echo reply, id 13292, seq 228, length 64
15:25:03.016160 IP 128.224.162.180 > 128.224.162.1: ICMP echo request, id 13292, seq 229, length 64
15:25:03.016588 IP 128.224.162.1 > 128.224.162.180: ICMP echo reply, id 13292, seq 229, length 64
15:25:04.016151 IP 128.224.162.180 > 128.224.162.1: ICMP echo request, id 13292, seq 230, length 64
...

That means xt_TEE clones the packets and sends them to eth1.

开发板推荐：天空星STM32F407VET6开发板

超高性价比 STM32主控 | 超高主频 | 一板兼容百芯 | 比赛神器 | 沉金彩色丝印

点击查看