Re: Mimicking TCP connection

Jose Nazario <[email protected]> Fri, 6 Aug 2004 21:03:47 -0400 (EDT)

Newsgroups	gmane.comp.security.libnet
Message-ID	<[email protected]>

check the archives. in a nutshell:

run the program on an IP-less interface, use an arp daemon to drive IP
traffic towards that interface (ie dugsong's arpd).

set up a firewall on the interface to block TCP traffic to the kernel so
you wont get those RSTs.

________
jose nazario, ph.d.			[email protected]
http://monkey.org/~jose/ 		http://infosecdaily.net/