[Winpcap-users] Sending packets upwards (to local IP stack)

[Gianluca Varenni]

I'm not sure it's a standard behavior. It's possible that it's documented in the NDIS specifications, but I haven't checked yet.

GV
  ----- Original Message ----- 
  From: Bengt Werstén 
  To: winpcap-users at winpcap.org 
  Sent: Friday, January 02, 2009 12:24 AM
  Subject: RE: [Winpcap-users] Sending packets upwards (to local IP stack)


  Hi, 

   

  Thanks for the reply. I might have found a way around this but I'm not sure if it is a standardized behavior. By sending a message with WinPcap with the same source and destination MAC as the network card (adapter) I send it to it seems to never leave the card (no traffic on the cable) but rather bounce back to the Windows IP-stack. I have only tested with one adapter so far so I need to know if this is something to rely upon. Any ideas?

   

  Best regards,

  Bengt

   


------------------------------------------------------------------------------

  From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Gianluca Varenni
  Sent: den 21 december 2008 20:40
  To: winpcap-users at winpcap.org
  Subject: Re: [Winpcap-users] Sending packets upwards (to local IP stack)

   

  It's not possible with WinPcap. With WinPcap you can only send/receive packets to/from the lower layer i.e. usually the network card. In order to inject packets back to the IP stack you would probably need an NDIS intermediate (IM) driver, or a virtual miniport.

   

  Have a nice day

  GV

    ----- Original Message ----- 

    From: Bengt Werstén 

    To: winpcap-users at winpcap.org 

    Sent: Wednesday, December 17, 2008 5:50 AM

    Subject: [Winpcap-users] Sending packets upwards (to local IP stack)

     

    Hi,

     

    I'm trying to replay messages from machines located on a VPN connection by spoofing their IP when sending the packages. It works fins because we send the packages to our self and the router/switch will return the message that we sent back to us. But I do not want to rely on this and some packages are of multicast type so other machines might get them and they have no valid route to the source IP. What I wonder is if it is possible to generate a package only to our local machine but instead create an incoming message instead of an outgoing. Is this possible? 

     

    Best regards,

    Bengt Werstén


----------------------------------------------------------------------------

    _______________________________________________
    Winpcap-users mailing list
    Winpcap-users at winpcap.org
    https://www.winpcap.org/mailman/listinfo/winpcap-users



------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20090107/52bee180/attachment-0001.htm