Linux netfilterÔ´Âë·ÖÎö(6)

תÌù×Ô£ºhttp://alexanderlaw.blog.hexun.com/8968944_d.html
Áù¡¢ À©Õ¹µÄmatch
 
6.1 do_matchº¯Êý  ip_tables.c
do_matchͨ¹ýIPT_MATCH_ITERATEºêÀ´µ÷ÓÃ,
IPT_MATCH_ITERATEÊÇÔÚipt_do_tableº¯ÊýÖе÷Óõĺê
IPT_MATCH_ITERATE(e, do_match,
                                  *pskb, in, out,
                                  offset, &hotdrop)
¶¨ÒåÈçÏ£º
#define IPT_MATCH_ITERATE(e, fn, args...)      \
({                               \
      unsigned int __i;               \
      int __ret = 0;                    \
      struct ipt_entry_match *__match;  \
                                  \
      for (__i = sizeof(struct ipt_entry);  \
           __i < (e)->target_offset;        \
           __i += __match->u.match_size) {      \
           __match = (void *)(e) + __i;    \
      &