Re: receiving all network traffic for a process?
Re: receiving all network traffic for a process?
- Subject: Re: receiving all network traffic for a process?
- From: "seaside.ki" <email@hidden>
- Date: Thu, 9 Oct 2003 14:16:11 +0200
You have to set the interface in promiscous mode.
A good example might be etherreal and it's pcap driver, which allows to
read all
network traffic. etherreal is an application to capture and analyze
your network
traffic.
Am Donnerstag, 09.10.03 um 12:53 Uhr schrieb Shaun Wexler:
On Oct 8, 2003, at 7:11 PM, Steven D. Arnold wrote:
I don't know if this is in the purview of Cocoa per se but I thought
I'd
ask. If you know of a better place for me to inquire, I'd be
grateful for a
pointer.
I'm working on an open-source application that essentially acts as a
local
application proxy. To do this, I'm trying to receive all network
traffic to
and from a given process. I want it to be process-based rather than
port-based because the process may attempt to send data to an
arbitrary port
from an essentially random port.
My application will receive all packets going in either direction,
examine
them, possibly manipulate them, and then either drop them or allow
them on
to their original destination. If I drop a packet or allow a modified
packet, the other party in the connection should either never see the
packet
at all (if I dropped it) or ONLY see the modified packet, not the
original
(if the packet was modified and then allowed).
I believe I can handle all aspects of this process once I can get all
the
packets to come to my application in the first place. Can anyone
give me
some advice on how this would be done, what libraries or frameworks
to look
at, or what in what other forums I might inquire?
You will need to write a (NKE) Network Kernel Extension. Ask on the
darwin-kernel and macnetworkprog lists.
--
Shaun Wexler
MacFOH
http://www.macfoh.com
_______________________________________________
cocoa-dev mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/cocoa-dev
Do not post admin requests to the list. They will be ignored.
_______________________________________________
cocoa-dev mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/cocoa-dev
Do not post admin requests to the list. They will be ignored.