https://inliniac.net/blog/category/libnet/ Recent content in Libnet on Inliniac Hugo en Wed, 09 Jan 2008 15:41:19 +0000 https://inliniac.net/blog/2008/01/09/snort_inline-updated-to-2801-in-svn/ Wed, 09 Jan 2008 15:41:19 +0000 https://inliniac.net/blog/2008/01/09/snort_inline-updated-to-2801-in-svn/ <p>I&rsquo;ve just committed an update to Snort_inline&rsquo;s SVN. It brings it to the Snort 2.8.0.1 level. It supports both IPv4 and IPv6 on IPQ and NFQ. I have not been able to test IPFW on IPv6, so I don&rsquo;t think that will work currently.</p> <p>This update removes the libdnet dependency and replaces it with libnet 1.1. To be able to send ICMPv6 unreachable packets you will need the libnet 1.1 patch I wrote a while ago. You can find that <a href="http://www.inliniac.net/blog/2007/10/16/libnet-11-ipv6-fixes-and-additions.html">here</a>. Get the latest Snort_inline by checking out SVN:</p> https://inliniac.net/blog/2007/10/16/libnet-11-ipv6-fixes-and-additions/ Tue, 16 Oct 2007 21:35:11 +0000 https://inliniac.net/blog/2007/10/16/libnet-11-ipv6-fixes-and-additions/ <p><a href="http://www.packetfactory.net/libnet/">Libnet</a> is a cool packet crafting tool, used by <a href="http://www.snort.org/">Snort</a> to send TCP reset packets and ICMP unreachable packets as part of active responses. Libnet 1.1 supports IPv6 which is what I needed for my work. After some reading and testing there were a few problems. First, while possible to send TCP reset packets, the packets didn&rsquo;t have a correct checksum and debugging this with valgrind showed lots of memory errors. Second, ICMPv6 was only partly implemented. The libnet_build_* functions for it are missing. This is, by the way, quite a common picture. Many libraries and projects have some support for IPv6, but generally incomplete and less well tested.</p>