Penetration Testing mailing list archives

RE: TCP Header manipulation of the protocol field


From: "Rob Shein" <shoten () starpower net>
Date: Wed, 4 Feb 2004 18:38:13 -0500

I want to clarify something...are you checking to see if filtering is taking
place within the VPN link in ESP?  Or are you checking to see if ESP itself
is being blocked?  Because if the second is true, you're not looking to do
anything with TCP at all; ESP is a different protocol  from TCP.

-----Original Message-----
From: Michael Burns [mailto:mburns () sp-uk com] 
Sent: Friday, January 30, 2004 11:09 AM
To: pen-test () securityfocus com
Subject: TCP Header manipulation of the protocol field


Hi Guys,

Sorry for this kind of request (well not really, not if I get 
the answer). I need to manipulate the protocol field of a TCP 
session to test for IP protocol filtering across a 
non-managed link. This is predominantly to help test/prove 
filtering in place when running ESP.

I simply need to get a pointer to somewhere to look up as 
I've hit a brick wall at the minute.

Predominantly the test environment will be from Windows 
platforms but can also be from Linux.

Cheers,

Mike



**********************************************************************
This email and any files transmitted with it are confidential 
and intended solely for the use of the individual or entity 
to whom they are addressed. If you have received this email 
in error please notify the system manager.

This footnote also confirms that this email message has been 
swept by MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**********************************************************************


---------------------------------------------------------------------------
----------------------------------------------------------------------------



---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: