Re: stopping the packets from getting to kernel

Mark Atkinson <[email protected]> Tue, 6 Jul 2004 12:45:06 -0700 (PDT)
Newsgroups gmane.comp.security.libnet
Message-ID <[email protected]>
On Sun, 4 Jul 2004, Mustafa Abu Sedera wrote:
> I want to write a program to capture and send some packets but I have a
> problem that the linux kernel responds to the packets that I capture and
> ruins the TCP sessions.

The solution is to set-up your own MAC/IP address on the segment.  To do
this you'll need to add code to do filter and respond to ARP packets.

Simply put, the solution is to use your own ethernet address and ip
address that do not match the hosts.  Respond to arp requests for your
address when you send your SYN.  Establish a filter for your MAC and IP to
see only the traffic for your application.

Good Luck.

---
Mark
(!wired)?(coffee++):(wired);