answering machine

        Hi all,

For a long time now, Mike and I talked about a library that would handle network contingency. As it seems I had more spare time than Mike lately, I started to code that on Friday evening.

The idea behind these first patches is to provide a link between a packet sent through libnet, and a captured packet, to test if the captured packet is an answer to the sent one. Currently, only Ethernet, ARP and IPv4 are supported, but adding new protocols is not too difficult (depending on the protocol).

A first question arise, specifically for Mike: should this be part of libnet ? The algorithm testing if a packet is an answer to another one is independent of libnet. But I also provide 2 functions based respectively on libnet_ptag_t and libnet_pblock_t as it points to a buffer containing the pblock for the tested layer

More information can be obtained from:

http://www.security-labs.org/index.php3?page=607

        Fred Raynal

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

PS: you can also find on my page the slides of a talk I gave a few days ago about libnet (with Mike's approval of course)

PS2 (adv): for those interested in packet building, have a look at Phil Biondi's scapy, a nice and powerful interactive packet manipulation tool, packet generator, network scanner, network discovery, packet sniffer, etc

http://www.cartel-securite.fr/pbiondi/scapy.html