Re: divert sock api q

2005-06-07 Thread Charles Swiger
On Jun 7, 2005, at 6:31 PM, Julian Elischer wrote: [ ...about the ip_vhl byte... ] sorry misread you.. yes.. OK. on my net segment there are a lot of other non IP packets floating around and I am used to seeing 45 and 42 and didn't stop to think that the 42 are not IP :-) No problem, the

Re: divert sock api q

2005-06-07 Thread Julian Elischer
Charles Swiger wrote: On Jun 7, 2005, at 5:29 PM, Julian Elischer wrote: I agree with your suggestion, but how can you have an ip_vhl of 0x42? Doesn't a valid IP packet need to have a header length of at least 5 (5 << 2 == 20 bytes)? sorry misread you.. yes.. on my net segment the

Re: divert sock api q

2005-06-07 Thread Giorgos Keramidas
On 2005-06-07 11:27, Christian Kuhtz <[EMAIL PROTECTED]> wrote: > I'm using the DIVERT socket API for a proof of concept lab setup here, > and I could use some help.. > > Two boxes are involved, packets traverse both in series. The first one, > lets call her A, is taking the UDP packet off the wir

Re: divert sock api q

2005-06-07 Thread Charles Swiger
On Jun 7, 2005, at 5:29 PM, Julian Elischer wrote: I agree with your suggestion, but how can you have an ip_vhl of 0x42? Doesn't a valid IP packet need to have a header length of at least 5 (5 << 2 == 20 bytes)? huh? the first byte of an IP packet is not the length.. the first byte you s

Re: divert sock api q

2005-06-07 Thread Julian Elischer
Charles Swiger wrote: On Jun 7, 2005, at 1:14 PM, Julian Elischer wrote: I apologize for being so exceptionally dense, this is driving me completely up the walls.. if you are receiving the entire IP packet in user space (first byte is 0x42 or 0x45 usually) then you need to update teh p

Re: divert sock api q

2005-06-07 Thread Charles Swiger
On Jun 7, 2005, at 1:14 PM, Julian Elischer wrote: I apologize for being so exceptionally dense, this is driving me completely up the walls.. if you are receiving the entire IP packet in user space (first byte is 0x42 or 0x45 usually) then you need to update teh packet length field of the

Re: divert sock api q

2005-06-07 Thread Julian Elischer
Christian Kuhtz wrote: Hello, I'm using the DIVERT socket API for a proof of concept lab setup here, and I could use some help.. Two boxes are involved, packets traverse both in series. The first one, lets call her A, is taking the UDP packet off the wire, inserts a few bytes after the

divert sock api q

2005-06-07 Thread Christian Kuhtz
Hello, I'm using the DIVERT socket API for a proof of concept lab setup here, and I could use some help.. Two boxes are involved, packets traverse both in series. The first one, lets call her A, is taking the UDP packet off the wire, inserts a few bytes after the UDP header, and sticks it