>Not via using tcp-dump I try to make a firewall (which's engine is out of
>kernel), so I try to get the packet via using libcap library, and if it is
>allowed give it on an other net via libnet library, bu I couldn't handle
>the data. I get the packet, I observe IP,port,etc and write on the other
>network same if its allowed, put server can't handle it so I think I
>couln't put the data. I'm sure the packet go the other network with true
>IP,port,etc because in other machine I run tcpdump. I saw the coming
>IP,port,etc. But the server which I write can't accept the connection
i guess this is separate from libpcap. how do you send out that
traffic out from the firewall? if you are using raw ip socket on
BSD or something, you need to flip certain fields (endian change).
itojun
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
