* (Re)injecting extra packets?
@ 2010-04-29 1:47 Morgon J. Kanter
0 siblings, 0 replies; only message in thread
From: Morgon J. Kanter @ 2010-04-29 1:47 UTC (permalink / raw)
To: netfilter
Another question...
Let's say I grab a bunch of packets from kernel space. I make some
modifications to them...but I also want to perhaps insert a packet into the
end, or even the middle, of the stream (updating the sequence numbers
appropriately, and the acknowledgment numbers appropriately on the way back).
Is there a mechanism for then injecting this extra packet into the kernel as
part of the stream? It seems like nfq_set_verdict() only works on packets
you've actually stolen, not created.
The only way I see to do this is raw sockets -- and then, it looks like I'm
probably better off giving a verdict of DROP each time, and sending the entire
stream of packets out the raw socket anew. Is there a better or cleaner way to
do this that I'm missing, or is raw sockets the best (or only) way?
Thanks,
-- Morgon
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2010-04-29 1:47 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-04-29 1:47 (Re)injecting extra packets? Morgon J. Kanter
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).