Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Aug 2007 01:40:28 -0700
From:      Julian Elischer <julian@elischer.org>
To:        Eric Anderson <anderson@freebsd.org>
Cc:        freebsd-hackers@freebsd.org
Subject:   Re: Modifying bridged traffic
Message-ID:  <46C40D7C.5010207@elischer.org>
In-Reply-To: <46C3B9A4.4000304@freebsd.org>
References:  <46C3B9A4.4000304@freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Eric Anderson wrote:
> What is the easiest way to play with modifying data in-transit within an 
> ethernet bridge?
> 
> For instance, say I have something like this:
> 
> [BOX 1] <----> [ BOX 2 ] <----> [ BOX 3 ]
> 
> And BOX 2 is a FreeBSD box with bridging enabled between two ethernet 
> interfaces, how can I parse/modify the ethernet frames as they pass 
> through?

a netgraph bridge can do that (you can hook two ng_bridges together
and capture all the packets that flow between them...

There are also some patches that allow divert sockets to be
attached to a bridging ipfw firewall.

> 
> Eric
> 
> _______________________________________________
> freebsd-hackers@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?46C40D7C.5010207>