Re: Packet interception / Mangling

From: Cole (cole_at_opteqint.net)
Date: 06/28/05

  • Next message: Andreas Feid: "ISCSI Beta" 
    To: "Julian Elischer" <julian@elischer.org>
Date: Tue, 28 Jun 2005 11:25:27 +0200

    Hi

    Isnt pcap meant to be non-intrusive, as in it only gets sent a copy of the packet from the kernel space to userspace? And doesnt
    actually intercept anything?

    Thanks for the other suggestions, but im trying to stay away from divert sockets, a friend also suggested libdnet, so I'll look into
    that today, but if you have any further ideas, please let me know, thanks

    Regards
    /Cole

    ----- Original Message -----
    From: "Julian Elischer" <julian@elischer.org>
    To: <cole@opteqint.net>
    Cc: <freebsd-hackers@freebsd.org>
    Sent: Tuesday, June 28, 2005 2:39 AM
    Subject: Re: Packet interception / Mangling

    >
    >
    > cole@opteqint.net wrote:
    >
    > >Hi
    > >
    > >I wanted to know if there are any libraries similar to pcap to intercept
    > >packets/mangle packets.
    > >
    > >
    >
    > how about pcap? :-)
    >
    > There are also two other mechinisms..
    > "divert sockets" (man divert) which is used in conjuction with teh ipfw
    > packet fileter
    > and netgraph (man 4 netgraph, man ngctl, man ng_socket, man ng_ether)
    > which can do a lot of interesting thins.
    >
    > >What im trying to do specifically is like link compression, and I would then
    > >need to check if the packet is then compressed and decompress, and so forth and
    > >so on.
    > >
    > >I would like to avoid having to use a ipfw divert to a port, and specifically
    > >check all traffic to the box using a library function or some kind of hook into
    > >the kernel.
    > >
    > >The FreeBSD version I will be using is 4.9 or 4.11, and would like to know if
    > >there are any such routines available, and whether it could be a userland
    > >daemon, or if i am going to need to write a kernel loadable module?
    > >
    > >If anyone has any ideas or suggestions, or knows anything about this, it would
    > >be a great help.
    > >
    > >Regards
    > >/Cole
    > >
    > >
    > >_______________________________________________
    > >freebsd-hackers@freebsd.org mailing list
    > >http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
    > >To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
    > >
    > >

    _______________________________________________
    freebsd-hackers@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
    To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"

  • Next message: Andreas Feid: "ISCSI Beta"

    Relevant Pages