Bind binds a Queue to a given protocol family. Usually, the family is syscall.AF_INET for IPv4, and syscall.AF_INET6 for IPv6

Create a new queue handle The queue must be initialized (using Init) and bound (using Bind), and a callback function must be set (using SetCallback).

Destroy a queue handle This also unbind from the nfqueue handler, so you don't have to call Unbind() Note that errors from this function can usually

Init creates a netfilter queue which can be used to receive packets from the kernel.

Main loop: Loop starts a loop, receiving kernel events and processing packets using the callback function.

SetCallback sets the callback function, fired when a packet is received.

SetVerdict issues a verdict for a packet. Every queued packet _must_ have a verdict specified by userspace.

Unbind a queue from the given protocol family. Note that errors from this function can usually be ignored.

Returns the interface that the packet was received through

Returns the packet mark

Returns the interface that the packet will be routed out

Returns the physical interface that the packet was received through

Returns the physical interface that the packet will be routed out

SetMode sets the amount of packet data that nfqueue copies to userspace Default mode is NFQNL_COPY_PACKET

* Cast argument to Queue* before calling the real callback Notes: - export cannot be done in the same file (nfqueue.go) else it fails to build

SetQueueMaxLen fixes the number of packets the kernel will store before internally before dropping upcoming packets

SetVerdictMark issues a verdict for a packet, but a mark can be set Every queued packet _must_ have a verdict specified by userspace.

SetVerdictMarkModified issues a verdict for a packet, but replaces the packet with the provided one, and a mark can be set. Every queued packet _must

SetVerdictModified issues a verdict for a packet, but replaces the packet with the provided one. Every queued packet _must_ have a verdict specified