Re: Sending UDP packets to local machine

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Arkady Frenkel (arkadyf_at_hotmailxdotxcom)
Date: 01/06/05 

Date: Thu, 6 Jan 2005 23:08:11 +0200

That's part of struggle with DOS attackers , you suffer from :).
The only way is go down in TCP stack and change the address after TCPIP , I
mean on IM level on NDIS driver( kernel mode ) . I can't see opportunity to
do that in user mode
Arkady

"James Bass" <anon@somewhere.com> wrote in message
news:1105031151.725118@ernani.logica.co.uk...
> Since Windows XP SP2 has broken some of the raw socket support (and
> therefore our application), I am looking for a way around this problem:
>
> Our application needs to send multicast packets with a spoofed source
> address to other standard applications (e.g. Windows Media Player) on the
> local machine (and NOT onto the network).
>
> Currently we do this by using a raw socket to send an IP packet from the
> machine with multicast TTL=0 (which stops packets being sent onto the
> physical interface, but allows them to be looped back to the local
machine).
>
> However, Windows XP SP2 will no longer allow UDP packets with an incorrect
> source address to be sent using raw sockets.
>
> Does anyone have any ideas of how to get around this restriction?
>
> Thanks,
> James
>
>

Relevant Pages

  • RAW socket: buffer size.
    ... I have a question related to RAW socket programming. ... You can also specify ID of ICMP ECHO packet. ... Before start of receiving the packets the program calls alarm ... register int nleft = len; ...
    (comp.os.linux.development.system)
  • Raw Sockets for packet sniffing
    ... able to inject packets through the raw socket but not to sniff packets. ... class RawSocket ... cnt = @sock.write packet_bytes ...
    (comp.lang.ruby)
  • Raw socket transfer, fixing slow TX rate (C program, linux)
    ... server to send my own information with as little overhead as possible. ... and just left a regular transfer of N packets of size PKT_SIZE ... receive packets from a RAW SOCKET ...
    (comp.os.linux.networking)
  • Raw socket transfer, fixing slow TX rate (C program, linux)
    ... server to send my own information with as little overhead as possible. ... and just left a regular transfer of N packets of size PKT_SIZE ... receive packets from a RAW SOCKET ...
    (comp.unix.programmer)
  • Sending UDP packets to local machine
    ... Since Windows XP SP2 has broken some of the raw socket support (and ... Our application needs to send multicast packets with a spoofed source ... Currently we do this by using a raw socket to send an IP packet from the ... Windows XP SP2 will no longer allow UDP packets with an incorrect ...
    (microsoft.public.win32.programmer.networks)