Re: Router filtering not enough! (Was: Re: CERT advisory )

[shipley () merde dis org (Pete Shipley)]

-----BEGIN PGP SIGNED MESSAGE-----


}g =

> > MAC address on a connection and to be worried if it came from a list of=
 =

> > routers but the address was the local net?
>
> I think you'll find that the MAC addresses are unavailable once the packe=
t
> has passed through the ethernet code.  I went digging yesterday, looking
> for _any_ way to get at the MAC header from the IP routines and found, no=
t
> surprisingly, that the MAC header is kept separately to the rest of the
> packet, which is passed upto the IP stuff as an mbuf.


look at the ioctl SIOCGARP, for a source code referance look at the
program getethers by Dave Curry.


                -Pete


-----BEGIN PGP SIGNATURE-----
Version: 2.6

iQBVAwUBLyict3ynuL1gkffFAQGMSwH7Be8hrXe4jw5MOyilvDr4PU72aZnYvHF3
k/nOGxU23Cb+V7443cUn5lePZZnLRXj3kkDgQJUVvOh77GCWHyJuBw=3D=3D
=3DE3nx
-----END PGP SIGNATURE-----