On 12/27/05, Fadi Kahhaleh <[EMAIL PROTECTED]> wrote: > Zaid thanks, but you seem to misunderstood my point. > > There are several ways you can actually intercept a packet (IP based > Which means udp,tcp, icmp...etc) > 1)Driver Level, which means writing code that works closely with HW.
why write scary ioctl's when you have libpcap? > 2)IP Filters and Interface Filters which his provided my M$ on NT plantform > and later. the Netfilter framework in the kernel. > > I know how to deal with both methods, but none are acceptable in my case :s > So I know and have written a small program that sniffs the packets > And displahys them, i.e src,dst, port of each packet...etc > > What I want to do is to say for example, stop all incoming packets if > They are on port 53 (dst port). All this using raw socket. what is raw socket? URL please. > Which is the > third > Method from the above two. > So in raw socket I have already done sniffing, now I need to > Be able to filter or block it rather than taking a copy of it. > > Thanks answer me this, do you *just* want to filter packets according to some set rules regarding IP or TCP characteristics? yes or no? -- --------------------------- Netiquette -> http://www.dtcc.edu/cs/rfc1855.html Netiquette Nazi -> http://redwing.hutman.net/%7Emreed/warriorshtm/netiquettenazi.htm --------------------------- _______________________________________________ General mailing list [email protected] http://mail.jolug.org/mailman/listinfo/general_jolug.org
