Re: Reinjecting packets using libipq

["Jee J.Z." <jz105@york.ac.uk>]

Hi,

You can have a look at 'libnet' for injecting a new packet. I think it's
good for packet construction. But I am not sure whether the newly generated
packet can bypass a certain hook or not at this time.

Jee

>    Also, I had another doubt, can we use libpq to reinject absolutely new
>    packets into the kernel at the ip level and make sure that they dont
get
>    caught by our registered netfilter hooks ? .. or if we cannot use libpq
>    then is someother way available (on the same system where we have the
>    PRE_ROUTING netfilter hook, we want to bypass this hook for certain
>    packets). The newly injected packets cld either be outbound(going to
the
>    wire) or inbound( they after going to ip will have to go up the stack
to
>    tcp and all)

I recently read your new mail at the netfilter mailing list about
(re)injecting new packets from userspace, but actually I don't think
that this would work (or at least it would be quite some work to
do), as you'd also have to build a completely new skb in your
function which would call nf_reinject. Anyone else with more
knowledge on this one??

Another way of injecting packets to the kernel might be packet sockets,
don't know if that would be the right one for you. see man 7 packet


HTH

Sven

>
> thanks
> Amit
>


-- 
Linux zion 2.6.6-rc1 #1 Sat Apr 17 11:50:12 CEST 2004 i686 athlon i386
GNU/Linux
 12:17:13  up 2 days, 19:14,  1 user,  load average: 4.20, 4.08, 2.82