bpf packet capture and SOCK_STREAM socket redirects...



Hi All,

Is it possible to redirect/send/divert a bpf packet capture of one
interface to a listening tcp socket on another interface of the same
machine?
Here is my problem:
I'm capturing packets on one interface but for some specific tcp
packets let's say from host A to host B on port P, I want to hijack
the packet and send it to a listening tcp socket on the other
interface and reply an "Access Denied" message.

I'd like to use the tcp socket on the other interface as it's not
possible to communicate over the interface that's doing the packet
capture and I don't want to invent the wheel by doing all the tcp/tcb
states hence using a tcp socket.

Thanks a lot
Alireza

PS. I've posted this to freebsd-questions too. My apologies.
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • RE: CISCO IDS Packet capture
    ... IP Logging - The sensor will capture the binary packets for a given address ... Trigger Packet - The sensor can attach the trigger packet directly to the ... which interface you want to sniff on. ...
    (Focus-IDS)
  • Re: bpf packet capture and SOCK_STREAM socket redirects...
    ... interface to a listening tcp socket on another interface of the same ... I'm capturing packets on one interface but for some specific tcp ... possible to communicate over the interface that's doing the packet ...
    (freebsd-net)
  • Re: Pix 501 Tunnelling problem
    ... but the packet never exits the outside interface. ... The fix was to add a static route for the remote address, however, this ... Rather than rely on the PIX capture, ...
    (comp.dcom.sys.cisco)
  • bpf packet capture and SOCK_STREAM socket redirects...
    ... Is it possible to redirect/send/divert a bpf packet capture of one ... interface to a listening tcp socket on another interface of the same ...
    (freebsd-questions)
  • Re: bpf packet capture and SOCK_STREAM socket redirects...
    ... I've got a data link capture of the packet ... Is it possible to do a bpf write of a packet that can be seen by the ... This means that the interface does it's normal work and the packet ... interface to a listening tcp socket on another interface of the same ...
    (freebsd-net)