[Tomahawk-devs] Re: Tomahawk-devs digest, Vol 1 #12 - 1 msg

[jibin 0. <ji...@hu...>]

Try to modify the source!

in tomahawk.c [line:0955-0980]

if (pkt->attacker) {
	ph->ether_shost[0] = if1.eaddr[0];
	ph->ether_shost[1] = if1.eaddr[1];
	ph->ether_shost[2] = if1.eaddr[2];
	ph->ether_shost[3] = if1.eaddr[3];
	ph->ether_shost[4] = if1.eaddr[4];
	ph->ether_shost[5] = if1.eaddr[5];
	ph->ether_dhost[0] = if2.eaddr[0];
	ph->ether_dhost[1] = if2.eaddr[1];
	ph->ether_dhost[2] = if2.eaddr[2];
	ph->ether_dhost[3] = if2.eaddr[3];
	ph->ether_dhost[4] = if2.eaddr[4];
	ph->ether_dhost[5] = if2.eaddr[5];
    } else {
	ph->ether_dhost[0] = if1.eaddr[0];
	ph->ether_dhost[1] = if1.eaddr[1];
	ph->ether_dhost[2] = if1.eaddr[2];
	ph->ether_dhost[3] = if1.eaddr[3];
	ph->ether_dhost[4] = if1.eaddr[4];
	ph->ether_dhost[5] = if1.eaddr[5];
	ph->ether_shost[0] = if2.eaddr[0];
	ph->ether_shost[1] = if2.eaddr[1];
	ph->ether_shost[2] = if2.eaddr[2];
	ph->ether_shost[3] = if2.eaddr[3];
	ph->ether_shost[4] = if2.eaddr[4];
	ph->ether_shost[5] = if2.eaddr[5];
    }

this can modify the mac address of the packet. Just replace it with you router's mac.

second: the TTL of ip will -1 in router, so in function PacketEqual, we should mask the
TTL.

----- Original Message -----
From: tom...@li...
Date: Tuesday, August 23, 2005 11:29 am
Subject: Tomahawk-devs digest, Vol 1 #12 - 1 msg

> Send Tomahawk-devs mailing list submissions to
> 	tom...@li...
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	https://lists.sourceforge.net/lists/listinfo/tomahawk-devs
> or, via email, send a message with subject or body 'help' to
> 	tom...@li...
> 
> You can reach the person managing the list at
> 	tom...@li...
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Tomahawk-devs digest..."
> 
> 
> Today's Topics:
> 
>   1. RE: Layer-3? (Samuel Johnson)
> 
> --__--__--
> 
> Message: 1
> From: "Samuel Johnson" <sjo...@ka...>
> To: "'nate'" <fin...@gm...>, <tomahawk-
> de...@li...>Subject: RE: [Tomahawk-devs] Layer-3?
> Date: Mon, 22 Aug 2005 14:19:02 +0100
> Organization: karalon
> 
> Try using Traffic IQ from www.karalon.com instead.
> 
> Sam
> 
> -----Original Message-----
> From: tom...@li...
> [tom...@li...] On Behalf Of nate
> Sent: 19 August 2005 15:16
> To: tom...@li...
> Subject: [Tomahawk-devs] Layer-3?
> 
> Hi, I'm looking to use Tomahawk at Layer-3. Has anyone modified it to
> support generating addresses in different networks?
> Specifically, to have the "client" IP and the "server" IP be in
> different sub-nets.
> The IPS I need to test supports both a Layer-2 bridge mode and a 
> Layer-3
> mode. 
> 
> Any help or direction would be appreciated. 
> 
> Thank you.
> 
> 
> -------------------------------------------------------
> SF.Net email is Sponsored by the Better Software Conference & EXPO
> September 19-22, 2005 * San Francisco, CA * Development Lifecycle 
> PracticesAgile & Plan-Driven Development * Managing Projects & 
> Teams * Testing & QA
> Security * Process Improvement & Measurement * 
> http://www.sqe.com/bsce5sf_______________________________________________
> Tomahawk-devs mailing list
> Tom...@li...
> https://lists.sourceforge.net/lists/listinfo/tomahawk-devs
> 
> 
> 
> 
> 
> --__--__--
> 
> _______________________________________________
> Tomahawk-devs mailing list
> Tom...@li...
> https://lists.sourceforge.net/lists/listinfo/tomahawk-devs
> 
> 
> End of Tomahawk-devs Digest
>