[Winpcap-users] Sending packets upwards (to local IP stack)

Bengt Werstén Bengt.Wersten at enea.com
Fri Jan 2 08:24:02 GMT 2009



Thanks for the reply. I might have found a way around this but I'm not sure if it is a standardized behavior. By sending a message with WinPcap with the same source and destination MAC as the network card (adapter) I send it to it seems to never leave the card (no traffic on the cable) but rather bounce back to the Windows IP-stack. I have only tested with one adapter so far so I need to know if this is something to rely upon. Any ideas?


Best regards,




From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Gianluca Varenni
Sent: den 21 december 2008 20:40
To: winpcap-users at winpcap.org
Subject: Re: [Winpcap-users] Sending packets upwards (to local IP stack)


It's not possible with WinPcap. With WinPcap you can only send/receive packets to/from the lower layer i.e. usually the network card. In order to inject packets back to the IP stack you would probably need an NDIS intermediate (IM) driver, or a virtual miniport.


Have a nice day


	----- Original Message ----- 

	From: Bengt Werstén <mailto:Bengt.Wersten at enea.com>  

	To: winpcap-users at winpcap.org 

	Sent: Wednesday, December 17, 2008 5:50 AM

	Subject: [Winpcap-users] Sending packets upwards (to local IP stack)




	I'm trying to replay messages from machines located on a VPN connection by spoofing their IP when sending the packages. It works fins because we send the packages to our self and the router/switch will return the message that we sent back to us. But I do not want to rely on this and some packages are of multicast type so other machines might get them and they have no valid route to the source IP. What I wonder is if it is possible to generate a package only to our local machine but instead create an incoming message instead of an outgoing. Is this possible? 


	Best regards,

	Bengt Werstén


	Winpcap-users mailing list
	Winpcap-users at winpcap.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20090102/08b83367/attachment.htm

More information about the Winpcap-users mailing list