I am new to kernel development. I am writing a kernel module that captures packet at the netfilter pre - routing hook.

I only want to capture the BEACON FRAME.

I have few queries:

1>When the beacon frame comes to receiving machine do the sk_buff gets allocated?

2> How can i identify the beacon frame at the pre routing hook?

3> Beacon frame consist of a string for authentication of client with the server, can i use sk_buff pointers to get access to that string, if sk_buff is allocated?

Regards

Gunjan