Re: NKE tcp redirect socket filter 10.4+

Subject: Re: NKE tcp redirect socket filter 10.4+

From: Josh Graessley <email@hidden>

Date: Thu, 10 May 2007 18:59:59 +0200

Delivered-to: email@hidden

On May 10, 2007, at 6:42 PM, Erez Kaplan <email@hidden> wrote:

======================
Hi josh,

>DTS should be able to help. There should be archives that go over the basics but gloss over the details.
Sorry for my ignorance, but what is DTS?

Developer technical support. Certain developer subscriptions include technical incidents where you can get help from a DTS engineer. Another option is to show up at WWDC to talk directly with an engineer.

The documentation does exist to accomplish this on your own and the archives of this list should contain more information. Use a socket filter and intercept the connect and sendto calls.

>It is possible but it is tricky to get right. I wrote a sample to test the KPI and did get it working but I can't find it now.
Any chances of finding it soon?

It will take some time. I'm currently out of the country and using only a small device for email.

Do you think such a redirection should be done at a packet level or a socket level?

Socket level. Look at socket filters. In the connect out callback, call sock_connect and return ejustreturn (glossing over error handling and non-blocking io).

======================

On May 10, 2007, at 3:29 PM, Josh Graessley wrote:

It is possible but it is tricky to get right. I wrote a sample to test the KPI and did get it working but I can't find it now.

DTS should be able to help. There should be archives that go over the basics but gloss over the details.

-josh

On May 10, 2007, at 8:02 AM, Erez Kaplan <email@hidden> wrote:

I have read the following:
Network Kernel Extensions
2007-04-03

I need to intercept in NKE, brower requests to
a certain host name and redirect it to another. (it eventually should get back to the browser)
I am looking into "socket filter" but so far with no success.
I am trying in "tl_connect_out_fn(void *cookie, socket_t so, const struct sockaddr *to)" to manipulate the host

Does the below extraction claim it's possible?

http://developer.apple.com/documentation/Darwin/Conceptual/NKEConceptual/SocketManipulation/chapter_3_section_3.html#//apple_ref/doc/uid/TP40001858-CH235-DontLinkElementID_6

#==================================
Note: If you were considering calling sock_close to redirect a socket to a different location,
you can do this by intercepting the connection request with a socket filter and redirecting the stream when the application first opens the socket.
Once opened, however, a stream cannot be redirected. For more information, see “Socket filters.”
#==================================

Erez Kaplan
Independent software developer OSX
email@hidden

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macnetworkprog/email@hidden

This email sent to email@hidden

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macnetworkprog/email@hidden

This email sent to email@hidden

_______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/macnetworkprog/email@hidden This email sent to email@hidden

References:
	>NKE tcp redirect socket filter 10.4+ (From: Erez Kaplan <email@hidden>)
	>Re: NKE tcp redirect socket filter 10.4+ (From: Josh Graessley <email@hidden>)
	>Re: NKE tcp redirect socket filter 10.4+ (From: Erez Kaplan <email@hidden>)