Re: Rawsock bpf mambo jambo?

From: Kamal R. Prasad (kamalpr_at_yahoo.com)
Date: 01/25/05

  • Next message: Alin-Adrian Anton: "Re: Rawsock bpf mambo jambo?"
    Date: Tue, 25 Jan 2005 06:41:54 -0800 (PST)
    To: DJF <deiif@yahoo.com>, hackers@freebsd.org
    
    

    bpf is a packet filter -which can be used to snoop on
    all packets at the interface at the link level. You
    would have to create a socket to do I/O, but the
    snooper can mess around with the existing connection.

    regards
    -kamal

    --- DJF <deiif@yahoo.com> wrote:

    > Hi everybody,
    >
    > I've recently been looking into raw socket
    > programming. However there's still a question that
    > remains. Maybe it's just a case of RTFM, if so point
    > me to a good manual on the topic.
    > The man pages indicate that you can do read and
    > write operations with rawsock aswell as bpf.
    > However, in all of the source codes I found, a raw
    > socket was used to write to, and bpf was used to
    > read from the interface.
    >
    > What's the advantage in using the rawsock bpf
    > combination instead of
    > bpf (or raw socket) only?
    >
    > Thx in advance,
    > dave
    >
    > --
    > Encrypt your emails! My PGPkeyID: 0xA37C182D
    > _
    > ( ) ASCII Ribbon Campaign against
    > X HTML mail and news
    > / \
    > _______________________________________________
    > freebsd-hackers@freebsd.org mailing list
    >
    http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
    > To unsubscribe, send any mail to
    > "freebsd-hackers-unsubscribe@freebsd.org"
    >

    __________________________________________________
    Do You Yahoo!?
    Tired of spam? Yahoo! Mail has the best spam protection around
    http://mail.yahoo.com
    _______________________________________________
    freebsd-hackers@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
    To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"


  • Next message: Alin-Adrian Anton: "Re: Rawsock bpf mambo jambo?"

    Relevant Pages

    • Rawsock bpf mambo jambo?
      ... I've recently been looking into raw socket programming. ... The man pages indicate that you can do read and write operations with rawsock aswell as bpf. ... However, in all of the source codes I found, a raw socket was used to write to, and bpf was used to read from the interface. ...
      (freebsd-hackers)
    • Re: Rawsock bpf mambo jambo?
      ... DJF wrote: ... > I've recently been looking into raw socket programming. ... However, in all of the source codes I found, a raw socket was used to write to, and bpf was used to read from the interface. ...
      (freebsd-hackers)
    • Re: Rawsock bpf mambo jambo?
      ... > can do read and write operations with rawsock aswell as bpf. ... > (or raw socket) only? ... lots of the paperwork, routing, etc, but then look for the response using ...
      (freebsd-hackers)
    • Re: Rawsock bpf mambo jambo?
      ... > What's the advantage in using the rawsock bpf combination instead of ... > bpf (or raw socket) only? ... Raw IP sockets for write take care of the following for you: ...
      (freebsd-hackers)
    • Re: diskless/pxe booting problem...
      ... > Yes, I've placed a stripped and gzipped kernel in both /tmp and, just ... > BIOS 577kB/64512kB available memory ... > bpf: sis0 attached ... > DHCP timeout for interface sis1 ...
      (freebsd-questions)