RE: stopping the packets from getting to kernel

You may need to write at API NIC Card level (LLC)to prevent interception
from OS kernel. Or your code need to operate at "Kernel Level"....

Cheers,

-----Original Message-----
From: Alberto Ornaghi [mailto:[email protected]] 
Sent: Tuesday, July 06, 2004 11:19 PM
To: Mustafa Abu Sedera
Cc: [email protected]; [email protected]
Subject: Re: stopping the packets from getting to kernel

Mustafa Abu Sedera wrote:
> For example.. I send a TCP SYN packet to some host X using libnet..then 
> X replies with a SYN Ack...I capture this packet with libpcap and want 
> to reply with a Ack but the kernel also gets a copy from it and 
> immediately sends a reset because as for the kernel it is a Ack packet 
> which he did not send the SYN for. So the TCP session gets destroyed..is 
> there any way to hinder the packets captured by libpcap from reaching 
> the kernel or is there any other idea on how to solve this issue???

you can write an iptables (or equivalent) rule to discard the packet. so 
it will never reach your kernel.

bye
-- 

    --==> ALoR <==---------------------- -  -   -

  There are only 10 types of people in this world...
  Those who understand binary, and those who don't.