Packet Construction and Protocol Testing...

[Charles Swiger]

On Jul 21, 2006, at 1:43 PM, Clément Lecigne wrote:
>> 44-pi# grep -l pcap_inject /usr/lib/libpcap*
>> 45-pi# nm -g /usr/local/lib/python2.4/site-packages/pcap.so | grep  
>> pcap_inject
>>          U pcap_inject
>
> Have you disable bpf support ? Which version of libpcap do you use ?

No, bpf is compiled into the kernel, and C code which uses libpcap  
seems to work fine:

1-pi# ident /usr/lib/libpcap.a
/usr/lib/libpcap.a:
      $Header: /tcpdump/master/libpcap/bpf_dump.c,v 1.13.2.1  
2003/11/15 23:26:37 guy Exp $
      $Header: /tcpdump/master/libpcap/bpf_image.c,v 1.25.2.1  
2003/11/15 23:26:38 guy Exp $
      $Header: /tcpdump/master/libpcap/etherent.c,v 1.21.6.1  
2003/11/15 23:26:38 guy Exp $
      $Header: /tcpdump/master/libpcap/scanner.l,v 1.95.2.3  
2004/03/28 21:45:33 fenner Exp $
      $Header: /tcpdump/master/libpcap/savefile.c,v 1.92.2.11  
2004/03/11 23:46:14 guy Exp $
      $Header: /tcpdump/master/libpcap/nametoaddr.c,v 1.68.2.3  
2003/11/19 18:13:48 guy Exp $
      $Header: /tcpdump/master/libpcap/optimize.c,v 1.76.2.3  
2003/12/22 00:26:36 guy Exp $
      $Header: /tcpdump/master/libpcap/gencode.c,v 1.193.2.8  
2004/03/29 20:53:47 guy Exp $
      $FreeBSD: src/usr.bin/yacc/skeleton.c,v 1.37 2003/02/12  
18:03:55 davidc Exp $
      $Header: /tcpdump/master/libpcap/grammar.y,v 1.79.2.3  
2004/03/28 21:45:32 fenner Exp $
      $Header: /tcpdump/master/libpcap/fad-getad.c,v 1.7.2.2  
2004/03/11 23:04:52 guy Exp $
      $Header: /tcpdump/master/libpcap/inet.c,v 1.58.2.1 2003/11/15  
23:26:41 guy Exp $
      $Header: /tcpdump/master/libpcap/pcap-bpf.c,v 1.67.2.4  
2003/11/22 00:06:28 guy Exp $
      $Header: /tcpdump/master/libpcap/bpf/net/bpf_filter.c,v  
1.43.2.1 2003/11/15 23:26:49 guy Exp $
      $Header: /tcpdump/master/libpcap/pcap.c,v 1.63.2.9 2004/03/25  
22:40:52 guy Exp $


> The problem seems due to your libpcap library which doesn't have  
> the pcap_inject() API.
>
> Personally, I've just tried the py-pypcap port from George and it  
> works well. i.e, I was able to inject packets...

Interesting...thanks for the reply.

-- 
-Chuck