Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Libtins v3.0: A fast C++ packet sniffing and crafting library

libtins.github.io

Post reply on HN
Print view View original

1–10 of 15 posts

Re: Libtins v3.0: A fast C++ packet sniffing and crafting library

#5

Post by pea-tear »

_RPM wrote: post #3

Excellent, interesting work to be read by me in the near future. How long did it take you complete this project, if you don't mind me asking?

I started this project with a colleague near the end of 2012, and I've continued development on my own since 2013. The first months of development implied a lot of work, but then just a couple of hours a week to fix bugs or improve some mechanisms.

Re: Libtins v3.0: A fast C++ packet sniffing and crafting library

#7

Post by pea-tear »

blakesmith wrote: post #6

We use thrift for a lot of internal service calls - this seems like it would be a great little library to capture and debug production thrift calls. Would I just need to implement my own PDU class that implements the protocol? Thanks! This looks great!

Yes, there's a small tutorial section on how to implement new protocols:

http://libtins.github.io/tutorial/new_protocols/

Re: Libtins v3.0: A fast C++ packet sniffing and crafting library

#8

Post by Zarathust »

Is it possible to manipulate traffic / drop it? A long time ago, I've been trying to build transparent tunnels, so that the user does not have to configure anything special to use it. The biggest difficulty I faced was to drop the original traffic to only allow the newly crafted one.

Is this something that your library helps with?.

Re: Libtins v3.0: A fast C++ packet sniffing and crafting library

#9

Post by pea-tear »

Zarathust wrote: post #8

Is it possible to manipulate traffic / drop it? A long time ago, I've been trying to build transparent tunnels, so that the user does not have to configure anything special to use it. The biggest difficulty I faced was to drop the original traffic to only allow the newly crafted one. Is this something that your library helps with?.

You can't drop the original traffic using the library. You could capture it, modify it and send it though. That + some iptables rules to drop the original traffic would be sufficient I guess.
Post reply on HN