how to hack linux driver to delay incoming packets Post: 302503009

Sponsored Content

Special Forums IP Networking how to hack linux driver to delay incoming packets Post 302503009 by Corona688 on Wednesday 9th of March 2011 12:33:09 PM

03-09-2011

Registered User

You can easily delay packets leaving the system using traffic control, but entering? That's a ton harder and much less stable: It has to store everything before it lets it enter, you get the potential for states where the kernel can't store as fast as it's receiving and has no way to tell the other end to slow down. In-kernel memory is also limited.

I'm not sure you need driver hacking to do it anyway. Doing it in userspace avoids most of the above problems. I'd try this:

Create a tun/tap interface (see Documentation/networking/tuntap.txt in the linux kernel)
Configure your ethernet device for 0.0.0.0, remove it from the routing table, and just read/write raw packets with a userspace program.
Write raw packets from the ethernet adaptor to the tun/tap device. Write raw packets from the tun/tap device to the ethernet adaptor. Your program can store them for how long you want inbetween.
Use your tun/tap device for normal traffic. Add it to the routing table, etc. so normal programs use it.

This User Gave Thanks to Corona688 For This Post:

Corona688

View Public Profile for Corona688

Visit Corona688's homepage!

Find all posts by Corona688

9 More Discussions You Might Find Interesting

1. Red Hat

How to check the outbound packets in Linux

I have a linux redhat box , our security department in my company informed me that my server's IP sends So many traffic in my network , This box I am using it as FTP server to store the other servers logs . My question briefly is how to check my outbound packets which are going from my PC to the...

2. Cybersecurity

~ IPTables : Limit Incoming UDP Packets With a Certain Length ~

Hello, I am currently trying to limit incoming UDP length 20 packets on a per IP basis to 5 a second using IPTables on a Linux machine (CentOS 5.2). Basically, if an IP is sending more than 5 length 20 UDP packet a second to the local machine, I would like the machine to drop the excess...

3. UNIX for Dummies Questions & Answers

Linux box drops the incoming packets

Hi all, I am new to Linux kernel. we have a c file that counts the no. of sends and received packets in each interface, and indicate the user about the error/drop ration of incoming and outgoing packets. in our Linux box , the incoming packets are dropped at random interval. we have our...

4. IP Networking

how to delay the outgoing packets ??

hello, i am searching a way to delay the incoming packets before it goes out of the system may i know how can i approach to this problem?

5. Linux

how to allow incoming UDP packets with iptables

I am looking for an iptables command to allow incoming UDP packets for my Linux server also is there a command I can use to set the default action for outgoing packets to accept? Thank you

6. Cybersecurity

How can someone hack into a Linux server ?

Hi! I have a debian linux VPS and i am wondering how would someone be able to hack into it , in what ways ? I've asked a more knowledgeable friend and he said the only way someone would be able to get into my VPS is via FTP or SSH, are there some other ways someone can enter my machine ? I...

7. IP Networking

How to route all incoming packets from one virtual interface?

Hello, I'm trying to route all packets arriving at a particular interface by entering the same interface the virtual interface eth1: 2 and now everything is routed by default gw configured on eth1. eth1 Link encap:Ethernet HWaddr 0a:0e:64:18:52:72 inet addr:192.168.10.15 eth1:2 ...

8. Red Hat

Hack a centos Linux box

HI, I have a Centos linux box and there is interface connect to internet. I stop the iptables in this box . After a few day , I find the linux box have been hacked and install some perl script into the box . Could anyone tell me how the hacker can login into the centos box without knowing...

9. IP Networking

How to route packets back to incoming interface?

Hi folks, I have a debian server running an Apache daemon on the eth0 interface. Now from time to time the server has to open an openvpn connection (tun0) to other networks to get some data from there. During this period the Apache is no longer reachable under it's IP address on eth0 because all...

LEARN ABOUT NETBSD

irip

IRIP(4) 						   BSD Kernel Interfaces Manual 						   IRIP(4)

NAME

     irip -- Raw IP over ISDN network driver

SYNOPSIS

     pseudo-device irip count

DESCRIPTION

     The irip driver interfaces the IP subsystem of the operating system with the ISDN layer so that transport of IP packets over an ISDN link is
     possible.

     The driver just packs IP packets without anything appended or prepended into raw HDLC packets on the B channel and transfers them to a remote
     site.  IP packets received from the remote site are queued into the local IP protocol stack.

     The format of the resulting packet on the B channel is:

	   (HDLC opening flag) (IP-packet) (CRC) (HDLC closing flag)

     In the case where an IP packet for a remote site arrives in the driver and no connection has been established yet, the driver communicates
     with the isdnd(8) daemon to establish a connection.

     The driver has support for interfacing to the bpf(4) subsystem for using tcpdump(8) with the irip interfaces.

     The driver optionally (when compiled with the IRIP_VJ option) provides Van Jacobson header compression, under control of the link0 and link1
     options to ifconfig(8):

	   link0	    Apply VJ compression to outgoing packets on this interface, and assume that incoming packets require decompression.
	   link1	    Check incoming packets for Van Jacobson compression; if they appear to be compressed, automatically set link0.

     The default values are on for link1 and off for link0.

SEE ALSO

     bpf(4), isdnd.rc(5), isdnd(8), tcpdump(8)

AUTHORS

     The irip device driver and this man page were written by Hellmuth Michaelis <hm@kts.org>.

BSD
								   July 6, 1998 							       BSD