• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: dlil_inject_if_input
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: dlil_inject_if_input


  • Subject: Re: dlil_inject_if_input
  • From: Matt Jaffa <email@hidden>
  • Date: Fri, 17 Sep 2004 19:40:49 -0600

Hi,

It seems that when I do netstat -s, I am noticing that when I try to go to a blocked site and it trys to inject my packet it increments the
bad version number in the ip section. But I am properly putting in the right version number in my tcp header.
Could having a bad version number for the ip header cause it to be discarded, and why is it not accepting the value,
One way I could see this happening is if it is incorrectly matching up the right bytes to my header.


Matt



On Sep 17, 2004, at 5:40 PM, Justin Walker wrote:


On Sep 17, 2004, at 16:22, Matt Jaffa wrote:


On Sep 17, 2004, at 3:53 PM, Justin Walker wrote:


On Sep 17, 2004, at 13:32, Matthew Jaffa wrote:
[snip]
Now the problem is, is inserting my own HTTP/1.1 response into the input stream of the machine that made the request.
[snip]
I am doing the checksumming correct now for the ipheader and tcpheader,

If you literally mean you checksummed the tcpheader, then you have a problem: the TCP checksum covers all the TCP data.

I read on the internet that the TCP checksum is calculated with the tcphdr, pseudo header that has IP elements in it, and the TCP data. I threw all of the in a mbuf and then used in_cksum and it calculates it.

Depending on where you inject your frames, you may be able to see the packet with tcpdump; have you tried that? Also, the pseudo header is kind of tricky, so you should look at code that computes it to be sure...


Regards,

Justin

--
Justin C. Walker, Curmudgeon-At-Large *
Institute for General Semantics | When LuteFisk is outlawed
| Only outlaws will have
| LuteFisk
*-------------------------------------- *-------------------------------*


_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
email@hidden


This email sent to email@hidden


_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: This email sent to email@hidden
  • Follow-Ups:
    • Re: dlil_inject_if_input
      • From: Justin Walker <email@hidden>
References: 
 >dlil_inject_if_input (From: "Matthew Jaffa" <email@hidden>)
 >Re: dlil_inject_if_input (From: Justin Walker <email@hidden>)
 >Re: dlil_inject_if_input (From: Matt Jaffa <email@hidden>)
 >Re: dlil_inject_if_input (From: Justin Walker <email@hidden>)

  • Prev by Date: Re: dlil_inject_if_input
  • Next by Date: Re: dlil_inject_if_input
  • Previous by thread: Re: dlil_inject_if_input
  • Next by thread: Re: dlil_inject_if_input
  • Index(es):
    • Date
    • Thread