Penetration Testing mailing list archives

Re: Any way to automatically change arbitrary headers of IP packets on-the-fly?


From: Lynx <lynx () enemy org>
Date: Wed, 13 Apr 2005 10:15:29 +0200

On Apr 12, 2005 at 1517 -0300, João Paulo Caldas Campello appeared and said:
[...]
  Does anybody know any userland tool, Linux kernel module,
iptables/netfilter module, or whatever mechanism to change arbitrary
headers of IP packets on-the-fly as long as they traverse the IP
stack? Is there any known paper regarding this subject?
[...]
I thought it could be done in the "MANGLE" table
of netfilter, but I found no TARGET that achieves that nor any
documentation about altering arbitrary IP headers.

Did you check out the QUEUE option and the libipq API? With libipq you
can inspect packets traversing the filter and change metadata or packet
information.

Cheers,
Lynx.


Current thread: