Hi, You can have a look at 'libnet' for injecting a new packet. I think it's good for packet construction. But I am not sure whether the newly generated packet can bypass a certain hook or not at this time. Jee > Also, I had another doubt, can we use libpq to reinject absolutely new > packets into the kernel at the ip level and make sure that they dont get > caught by our registered netfilter hooks ? .. or if we cannot use libpq > then is someother way available (on the same system where we have the > PRE_ROUTING netfilter hook, we want to bypass this hook for certain > packets). The newly injected packets cld either be outbound(going to the > wire) or inbound( they after going to ip will have to go up the stack to > tcp and all) I recently read your new mail at the netfilter mailing list about (re)injecting new packets from userspace, but actually I don't think that this would work (or at least it would be quite some work to do), as you'd also have to build a completely new skb in your function which would call nf_reinject. Anyone else with more knowledge on this one?? Another way of injecting packets to the kernel might be packet sockets, don't know if that would be the right one for you. see man 7 packet HTH Sven > > thanks > Amit > -- Linux zion 2.6.6-rc1 #1 Sat Apr 17 11:50:12 CEST 2004 i686 athlon i386 GNU/Linux 12:17:13 up 2 days, 19:14, 1 user, load average: 4.20, 4.08, 2.82
