Re: Using netgraph for filtering/modifing packets

2004-06-15 Thread Ruslan Ermilov
On Mon, Jun 14, 2004 at 01:51:15PM -0500, Jon Noack wrote: > You can simulate a lossy link with dummynet. > A week or so ago, I've written a simple ng_drop(4) module which drops packets with a programmed probability. If this is of any interest to anyone, let me know. There's also a thingie float

Re: Using netgraph for filtering/modifing packets

2004-06-15 Thread Paul Schenkeveld
On Mon, Jun 14, 2004 at 01:28:06PM -0400, James Housley wrote: > Julian Elischer wrote: > > > >On Mon, 14 Jun 2004, James Housley wrote: > > > > > >>For testing of a product I would like to be able to modify or even drop > >>packets based on their content. What I have in mind is forcing the > >>pa

Re: Using netgraph for filtering/modifing packets

2004-06-14 Thread Jon Noack
On 06/14/04 12:28, James Housley wrote: Julian Elischer wrote: On Mon, 14 Jun 2004, James Housley wrote: For testing of a product I would like to be able to modify or even drop packets based on their content. What I have in mind is forcing the packets through a firewall that would redirect all pac

Re: Using netgraph for filtering/modifing packets.

2004-06-14 Thread Julian Elischer
On Mon, 14 Jun 2004, James Housley wrote: > > I have a product that is connected to a PC via eithernet. The product > runs FBSD, but I would likely put another FBSD box in the middle. I want > to be able modify packets for good and evil based on the data portion of > the packet. > > For e

Re: Using netgraph for filtering/modifing packets

2004-06-14 Thread Julian Elischer
On Mon, 14 Jun 2004, James Housley wrote: > For testing of a product I would like to be able to modify or even drop > packets based on their content. What I have in mind is forcing the > packets through a firewall that would redirect all packet to a netgraph > node that would either pass unchan

Re: Using netgraph for filtering/modifing packets

2004-06-14 Thread James Housley
Julian Elischer wrote: On Mon, 14 Jun 2004, James Housley wrote: For testing of a product I would like to be able to modify or even drop packets based on their content. What I have in mind is forcing the packets through a firewall that would redirect all packet to a netgraph node that would eithe

Re: Using netgraph for filtering/modifing packets

2004-06-14 Thread Gleb Smirnoff
On Mon, Jun 14, 2004 at 10:48:34AM -0400, James Housley wrote: J> For testing of a product I would like to be able to modify or even drop J> packets based on their content. What I have in mind is forcing the J> packets through a firewall that would redirect all packet to a netgraph J> node that wo

Using netgraph for filtering/modifing packets

2004-06-14 Thread James Housley
For testing of a product I would like to be able to modify or even drop packets based on their content. What I have in mind is forcing the packets through a firewall that would redirect all packet to a netgraph node that would either pass unchanged, drop or change the contents to assist in testing