Skip to contentSkip to conversation

Module For Intercepting Fully Constructed IPv6 Packets

DISCUSSION Matthew Jakeman 2 participants 2 messages Apr 30, 2009 – May 4, 2009

Subsystems (2)
lore
Share & tools
lore
#0 lore raw

Hi,

I am pondering attempting to write a module that will allow me to intercept an IPv6 packet once it has been fully constructed (so just before it gets passed to the output interface). The point of this is so that I can play around with the packets construction however I please to try out a few things.

I have successfully implemented one version of my code on FreeBSD. However this is done directly inside the kernel and I would like to attempt a Linux implementation as a module for greater flexibility.

I have only just started looking into this and was wondering if anyone could give me any pointers on how I might be able to achieve this. I am fairly new in the world of Linux kernel hacking with most of my previous experience being working with the FreeBSD kernel.

Any pointers will be much appreciated.

Cheers
Matt

#1 lore raw
Quoted 5 lines · Matthew Jakeman

I am pondering attempting to write a module that will allow me to intercept an IPv6 packet once it has been fully constructed (so just before it gets passed to the output interface). The point of this is so that I can play around with the packets construction however I please to try out a few things.

You need a netfilter module on the OUTPUT chain. For further questions on that please ask the netfilter mailing list.

-Andi

Signature · 1 line
[email protected] -- Speaking for myself only.