Hi all,

let me get in to the subject,
i am trying a RAW socket program to send my own IP datagrams to the
network. i could send all the valid datagrams (like echo request/ time
stamp request etc etc ). but when i send a datagram with invalid IHL or
Version field that datagram is not going outside the system..i heard
that using RAW socket and with IP_HDRINCL option we can send whatever
data we want to the net. please let me know what should i do to do the
same.

regards,
vneeth
(also Please let me know where i can find more details on RAW sockets)

"bLaCkliGhts" <bLaCklitEs@gmail.com> writes:
> let me get in to the subject,
> i am trying a RAW socket program to send my own IP datagrams to the
> network. i could send all the valid datagrams (like echo request/ time
> stamp request etc etc ). but when i send a datagram with invalid IHL or
> Version field that datagram is not going outside the system..i heard
> that using RAW socket and with IP_HDRINCL option we can send whatever
> data we want to the net. please let me know what should i do to do the
> same.

You'll need to provide more details about the implementation you're
using. Some systems prohibit raw IP socket users from sending
obviously invalid messages. To do that, you'll need a lower-level
interface to the driver itself.

--
James Carlson, KISS Network <james.d.carlson@sun.com>
Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677

Thank you for the quick response Mr Carlson. I am working on Linux
platfrm (kernal :2.4.20.-8) . and i wanted to know how the IP stack in
a machine respond to a packet with invalid IP version field/or IHL
value...or any invalid field. Please let me know what all are the
details u expecting.
Regards
Vneeth

On Nov 20, 5:44 pm, James Carlson <james.d.carl...@sun.com> wrote:
> "bLaCkliGhts" <bLaCkli...@gmail.com> writes:
> > let me get in to the subject,
> > i am trying a RAW socket program to send my own IP datagrams to the
> > network. i could send all the valid datagrams (like echo request/ time
> > stamp request etc etc ). but when i send a datagram with invalid IHL or
> > Version field that datagram is not going outside the system..i heard
> > that using RAW socket and with IP_HDRINCL option we can send whatever
> > data we want to the net. please let me know what should i do to do the
> > same.You'll need to provide more details about the implementation you're
> using. Some systems prohibit raw IP socket users from sending
> obviously invalid messages. To do that, you'll need a lower-level
> interface to the driver itself.
>
> --
> James Carlson, KISS Network <james.d.carl...@sun.com>
> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084
> MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677

"bLaCkliGhts" <bLaCklitEs@gmail.com> writes:
> Thank you for the quick response Mr Carlson. I am working on Linux
> platfrm (kernal :2.4.20.-8) . and i wanted to know how the IP stack in
> a machine respond to a packet with invalid IP version field/or IHL
> value...or any invalid field. Please let me know what all are the
> details u expecting.

I'm not much of a Linux user anymore, but what I think you want is
something called "PF_PACKET." Just google on that term, and you'll
get tens of thousands of hits. Some of which are even ful. ;-}

--
James Carlson, KISS Network <james.d.carlson@sun.com>
Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677

thanks for that good clue (PF_PACKET)..hope i've got somethin' to
try on..!! 'll 'll be back with my results ..! thanks agaain James.!!


On Nov 21, 3:18 am, James Carlson <james.d.carl...@sun.com> wrote:
> "bLaCkliGhts" <bLaCkli...@gmail.com> writes:
> > Thank you for the quick response Mr Carlson. I am working on Linux
> > platfrm (kernal :2.4.20.-8) . and i wanted to know how the IP stack in
> > a machine respond to a packet with invalid IP version field/or IHL
> > value...or any invalid field. Please let me know what all are the
> > details u expecting.I'm not much of a Linux user anymore, but what I think you want is
> something called "PF_PACKET." Just google on that term, and you'll
> get tens of thousands of hits. Some of which are even ful. ;-}
>
> --
> James Carlson, KISS Network <james.d.carl...@sun.com>
> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084
> MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677

On 20 Nov 2006, in the Usenet newsgroup comp.protocols.tcp-ip, in article
<1164035144.266782.25110@e3g2000cwe.googlegroups.c om>, bLaCkliGhts wrote:

>Thank you for the quick response Mr Carlson. I am working on Linux
>platfrm (kernal :2.4.20.-8) . and i wanted to know how the IP stack in
>a machine respond to a packet with invalid IP version field/or IHL
>value...or any invalid field.

2.4.20-8 was the out-of-box kernel for Red Hat 9 back in April 2003.
You can easily check this by running two commands:

uname -a which tells you the kernel version
cat /etc/*release /etc/*version which identifies the release number

Red Hat updated that kernel nine times over the service life of that
distribution, and 'fedoralegacy.org' has back-ported at least three
further security updates to the kernel. Last I looked, the "current"
kernel for this obsolete distribution was '2.4.20-46.9.legacy' released
back in early March. See http://download.fedoralegacy.org/ for the
archived updates.

Old guy