* NF_ARP_OUT skb has NULL link layer header
@ 2004-06-23 14:07 kernel exis
0 siblings, 0 replies; 2+ messages in thread
From: kernel exis @ 2004-06-23 14:07 UTC (permalink / raw)
To: netfilter-devel
Hello,
I've been working lately on a netfilter hook extension which rewrites outgoing ARP packets to spoof a host's MAC address.
I've succesfully spoofed ARP replies, but have seen that several OS's tend to update their arp cache based on information in ARP requests.
After several panic()'s, I noticed that the link layer header (skb->mac)
is NULL. My intention was to rewrite the ethernet mac address to the spoofed MAC address.
Is there a way to rewrite the link layer header besides modifying skb->mac (skb->mac.ethernet to be precise), or could I possibly just tag on a kmalloc()'ed pointer to the skb->mac?
If it makes any difference, I only noticed this when porting the code to linux 2.6 (2.6.7).
Thanks a lot, in advance
Phillip Whelan, EXIS (http://www.exis.cl)
^ permalink raw reply [flat|nested] 2+ messages in thread
* NF_ARP_OUT skb has NULL link layer header
@ 2004-06-23 17:38 phill whelan
0 siblings, 0 replies; 2+ messages in thread
From: phill whelan @ 2004-06-23 17:38 UTC (permalink / raw)
To: linux-kernel
Hello,
I've been working lately on a netfilter hook extension which rewrites outgoing ARP packets to spoof a host's MAC address.
I've succesfully spoofed ARP replies, but have seen that several OS's tend to update their arp cache based on information in ARP requests.
After several panic()'s, I noticed that the link layer header (skb->mac)
is NULL. My intention was to rewrite the ethernet mac address to the spoofed MAC address.
Is there a way to rewrite the link layer header besides modifying skb->mac (skb->mac.ethernet to be precise), or could I possibly just tag on a kmalloc()'ed pointer to the skb->mac?
If it makes any difference, I only noticed this when porting the code to linux 2.6 (2.6.7).
Thanks a lot, in advance
Phillip Whelan
EXIS (http://www.exis.cl)
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2004-06-23 17:42 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-06-23 17:38 NF_ARP_OUT skb has NULL link layer header phill whelan
-- strict thread matches above, loose matches on Subject: below --
2004-06-23 14:07 kernel exis
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.