Re: User-space controlled raw ethernet - Is this the way to go?

Bernhard Agthe <dark2star@xxxxxxx> writes:
My plan is to create a very simple kernel module that probably uses
direct socket code to perform ethernet frame transmission and reception.

There's something like that, the TUN/TAP interface which provides access
to the raw sockets. This is used e.g. by the former ethereal or by
various IPsec/VPN solutions.

TUN/TAP is a virtual network interface, which can be used to forward
ethernet frames or IP datagrams addressed to certain destinations to
some 'ordinary' process, which can also inject 'somehow constructed'
replies/ packing coming from such a destination by writing them to the
chardev associated with a particual TUN (IP) or TAP (ethernet) device.

'raw sockets' are something completely different.
.

Relevant Pages

  • Re: Hacking to Xp box
    ... Raw sockets can't be reenabled via command ... Firewall servicewe have to decide whether we need to stop or start ... Windows XP>restricts most of the attacks that use anonymous connections. ...
    (Pen-Test)
  • Raw sockets, MS05-019 and Windows Firewall -- Summary
    ... Based upon the presence of MS05-019 and the state of the Windows ... though TCP raw sockets are unaffected by the firewall the ALG service, ... the ALG service and we're good to go. ...
    (NT-Bugtraq)
  • Re: RAW Sockets and Posibilities
    ... the sockets well enough to be able to help me. ... Using RAW sockets can I somehow capture all packets addressed to an IP ... Visual Studio package compleatly and look elsewhere for a programming ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Raw sockets on Vista with IPPROTO_ICMP
    ... Microsoft MVP, MCSD ... I'm trying to keep my ping program up to date with Vista. ... around raw sockets changed in XP SP2 and again under Vista. ...
    (microsoft.public.win32.programmer.networks)