Only possibility is by faking ARP replies directing outgoing and incoming packets to your machine, after checking the packets you can send them to proper interfaces. Existence of a switch etc, could complicate things, plus this process doubles the bandwith usage, etc. Anyway it is inevitable that you must do some clever coding, and there is no easy way out. ----- Original Message ----- From: "Adam Zeldis" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 29, 2002 6:14 PM Subject: Re: [WinPcap-users] "On the fly" Packet Editing
> So then it is possible? How about this: Filtering ALL outgoing packets, > and then re-sending the ones not containing the specified string...the ones > that do contain it will get edited and then resent. > > Thanks for any input. > Adam > > ----- Original Message ----- > From: nergim > To: [EMAIL PROTECTED] > Sent: Monday, July 29, 2002 6:39 AM > Subject: Re: [WinPcap-users] "On the fly" Packet Editing > > > Packets you are sniffing is already on the line, hence you must do something > very tricky to avoid this. > ----- Original Message ----- > From: Adam Zeldis > To: [EMAIL PROTECTED] > Sent: Monday, July 29, 2002 10:57 AM > Subject: [WinPcap-users] "On the fly" Packet Editing > > > I am rather new to development with Winpcap, as well as packet-based > development in general. > > What I was wondering is this: Is it possible, with winpcap, to write a > program that would check each outgoing packet for a specified string, and if > it contained that string, the packet would then be edited to contain another > string of the same length and the packet would still be sent as though > nothing had happened? Please let me know if this is feasible with winpcap. > If it isn't what would I need in order to do it? > > Thanks much. > Adam > [EMAIL PROTECTED] >
