Re: understanding TCP-IP interface in linux kernel

Hi all,
Thanks for the links which you have sent .I am going through those .

Where do you want to capture outgoing packets. Before or after TCP
processing?

I want to get incoming packet before TCP and outgoing packet after TCP.
So meaning there by , i would like to have module sitting between TCP
and IP . Correct me if i am wrong ...

I have also come across netfilter framework in linux kernel using which
we can provide hooking functions and intercept packets. Though am not
sure ,does this intercept packet before going to "IP" layer ?? If yes,
is this one which i can use ??

Would you please tell what you're going to do with the intercepted
packets (if it's IP it's a packet, if it's TCP it's a segment).

I am trying to write this module which will implement Fault tolrent TCP
:
Ref : http://citeseer.ist.psu.edu/alvisi00wrapping.html

So does netfilter is right choice to go about it ??

Thanking all in advance ....

Regards,
TellMeMore

.

Relevant Pages

  • alt.2600 FAQ Revision .014 (2/4)
    ... One type of firewall is the packet filtering firewall. ... Dropping packets instead of rejecting them greatly increases the time required to scan your network. ... Port scanning UDP ports is much slower than port scanning TCP ports. ... Chartreuse Use the electricity from your phone line Cheese Connect two phones to create a diverter Chrome Manipulate Traffic Signals by Remote Control ...
    (alt.2600)
  • Re: jailed "system" needs IPV4 access
    ... see if the ACK flag is set on a tcp packet. ... the keep-state option just ... 00500 deny log ip from 192.160.1.0/24 to any in via dc1 ...
    (comp.unix.bsd.freebsd.misc)
  • Re: Incoherent E-mails
    ... The Novell crap was originally run on IPX ... The term in the early-mid nineties was "packet storm". ... The original advantage of UDP was ... > 60 bytes for TCP. ...
    (alt.computer.security)
  • Re: A question regarding MTU: how it can effect TCP performance + other queries
    ... Can you check if your physical NIC has TCP large send offload enabled? ... I can't think of anything for the UDP case however, that just seems strange to me. ... Are you grouping multiple UDP packets in one TCP packet? ... encapsulated within another TCP packet when passed to physical interface, while for UDP I am sending UDP packet encapsulated within TCP packet when passed to physical interface. ...
    (microsoft.public.development.device.drivers)
  • [NEWS] Cisco PIX TCP Connection DoS
    ... Get your security news from a reliable source. ... By crafting a special TCP packet and sending it to a vulnerable Cisco PIX, ... embryonic connection open until the embryonic connection timeout which is ...
    (Securiteam)