public inbox for linux-kernel@vger.kernel.org
 help / color / mirror / Atom feed
* NF_ARP_OUT skb has NULL link layer header
@ 2004-06-23 17:38 phill whelan
  0 siblings, 0 replies; only message in thread
From: phill whelan @ 2004-06-23 17:38 UTC (permalink / raw)
  To: linux-kernel

Hello,

I've been working lately on a netfilter hook extension which rewrites outgoing ARP packets to spoof a host's MAC address.

I've succesfully spoofed ARP replies, but have seen that several OS's tend to update their arp cache based on information in ARP requests.
After several panic()'s, I noticed that the link layer header (skb->mac)
is NULL. My intention was to rewrite the ethernet mac address to the spoofed MAC address.

Is there a way to rewrite the link layer header besides modifying skb->mac (skb->mac.ethernet to be precise), or could I possibly just tag on a kmalloc()'ed pointer to the skb->mac?

If it makes any difference, I only noticed this when porting the code to linux 2.6 (2.6.7).

Thanks a lot, in advance

Phillip Whelan
EXIS (http://www.exis.cl)

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2004-06-23 17:42 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-06-23 17:38 NF_ARP_OUT skb has NULL link layer header phill whelan

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox