Question about programming with ip_queue
lam wai wm
Sat, 18 Aug 2001 17:50:29 GB
I've tried to create a new payload with the original header,
but new payload. I've found that it keeps sending the encrypt
packet, but the data inside, is the output of the encrypted
"encrypted content". (It means it keep sending an encrypted
"encrypted data content"). But it didn't reach the point of
the destination. I mean in the destination side, it didn't
reach hook point of the program. So how can I solve the
problem? Is it because I didn't change the checksum in the
sending side? And the kernel will silently discard modified
packets with invalid checksums. And honestly, I don't want to
change the original checksum. Would you mind telling me how
can I rememdy this?
Thanks, thanks so much.
Brad Chapman <email@example.com> wrote:
> --- lam wai wm <firstname.lastname@example.org> wrote:
> > Dear Mr James Morris,
> > Thanks for your reply. And I'm implementing a system,
> > will encrypt, decrypt the packet. And I've encrypted the
> > payload, but the size is bigger than the original size.
> > Although I've passed the new size in the function of
> > ipq_set_verdict, but it can just transmit the original
> > payload. I mean it will discard the byte afterward. So I
> > tried the other approach that I clone the payload (Header
> > information), and place a encrypted payload. But it seems
> > didn't work, too.
> > Could you please tell me how can I transmit the packet
> > bigger size of payload) to the network.
> > Thanks, thanks a lot.
> > Very respectfully,
> > marco.
> Mr. marco,
> If you were doing this in the kernel, you would simply
> the skb and recalculate the checksum. In userspace, though,
you need to
> pass your expanded payload and payload length to
ipq_set_verdict(). See the
> libipq man pages.
> Brad Chapman
> Permanent e-mail: email@example.com
> Current e-mail: firstname.lastname@example.org
> Reply to the address I used in the message to you,
> Do You Yahoo!?
> Make international calls for as low as $.04/minute with