tcpdump mailing list archives

Re[2]: packet modification


From: Kifah Abbad <kifah () prz tu-berlin de>
Date: Tue, 4 Nov 2003 11:15:00 +0100

Hello John,

Tuesday, November 4, 2003, 6:39:33 AM, you wrote:

JF> Hi Kifah,

JF> I tried doing something similiar a little while ago and couldn't find any
JF> good ways to stop the packets from getting to the network stack.  I found
JF> two possible ways, one was to catch them at the kernel level using a
JF> LKM(loadable kernel module), and the other was to use  iptables to drop
JF> them and since libpcap captures them before iptables drops them you can
JF> retransmit the packets.  I cant remember the name of the library to
JF> interact with iptables but if you need it email me offline and i'll look
JF> it up, i'm in class right now.  And if you find a better way let me know.

JF> john fastabend



Well, i forgot to mention that my ipsec-bridges operate on openbsd 3.3
Nevertheless i would appreciate it if you send me the name of
library.I will email you over that.

Thanks

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe


Current thread: