libipq is a development library for

iptables iptables is a user-space utility program that allows a system administrator to configure the IP packet filter rules of the Linux kernel firewall, implemented as different Netfilter modules. The filters are organized in a set of tables, whi ...

userspace packet queuing. Libipq provides an

API An application programming interface (API) is a connection between computers or between computer programs. It is a type of software interface, offering a service to other pieces of software. A document or standard that describes how to build ...

for communicating with ip_queue. Libipq has been deprecated in favour of the newe
libnetfilter_queue
in Linux kernel-2.6.14 onwards.

Use in widely used software applications

libipq has been used by some widely deployed applications as their interface to the Linux kernel-space

packet filter. * Snort - Snort is an

Intrusion Detection System An intrusion detection system (IDS) is a device or software application that monitors a network or systems for malicious activity or policy violations. Any intrusion activity or violation is typically either reported to an administrator or collec ...

which runs in user-space and uses libipq to interface with Linux's iptables packet filter.

External links

iptables at netfilter.org

libipq subversion repository

Libipq network simulator example
Linux kernel features Linux security software {{Compu-library-stub