Re: Best way to intercept inbound and outbound TCP packets

You must write one netfilter module and one iptables module and compile
it and then activate netfilter module from iptables.

will_u_tellmemore wrote:
Tauno Voipio wrote >>
If it's enough to get the packets (but not chenge them before
forwarding), have a look at libpcap.

I also need to send fake packets to Kernel TCP layer through my hooks

If it's something else, please explain what you're attempting
to achieve.

I am trying to implement Fault tolerant TCP support through a loadable
kernel module. For which i need to log every incoming TCP packet and
sometimes generate fake ones.

Also after looking into IPFilter source code , i think it doesn't
export any such interface for hooks but it itself uses such things. On
linux it uses Netfilter and On Solaris it uses pfil module.
So i feel i really don't have 2 options like Netfilter & IpFilter but
only one i.e. NetFilter. These 2 things seem to be different.


Thanks ,
Rohit

.

Relevant Pages

  • Re: iptables: state INVALID
    ... Die TCP state machine in netfilter hat zwar einen Timeout fuer ... established connections, der ist aber... ... ESTABLISHED Verbindungen terminiert; zumindest kann ich sie ... waren mehrere TCP Retransmissions oder auch ein TCP ...
    (de.comp.security.firewall)
  • Re: TOE brain dump
    ... > Internet users. ... tweak TCP to actually work over such links. ... > the TCP net stack, then TCP isn't the right solution for you anymore, ... And when they're done with netfilter, you can throw IPsec, ...
    (Linux-Kernel)
  • Re: ip6tables - richtiger umgang
    ... Die TCP Statemachine kann man nicht auf einen eindimensionalen ... Zustandsgraphen abbilden. ... Genau das passiert bei Netfilter aber. ...
    (de.comp.security.firewall)