Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I use the nfqueue target of iptables in order to get packet to the nfqueue and do some business rules on them.

iptables -A INPUT -p tcp -j NFQUEUE --queue-num 0

I need to do the same on arp reply and i see that there is QUEUE target in the arptables:

arptables -A INPUT -j QUEUE

The problem is that I cannot figure out if the queue here is the same as the iptables nfqueue and if not how can i read from it.

I just looking for a way to be called when i get an ARP reply for a given IP. Using libpcap is in lowest priority , because with libpcap i will need to run on all packets.

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.