7. Linux TCP/IP Stack Injection Module

This module can be used to inject/capture packets to/from the Linux TCP/IP Stack, simulating the arrival/sending of those packets on an interface. The application has to open a ring by using as device name “stack:ethX” where ethX is the interface bound to the packets injected into the stack. In order to inject a packet to the stack pfring_send() has to be used, in order to capture outgoing packets pfring_recv() has to be used.

You can test the stack module with all PF_RING apps. Example:

pfcount -i stack:eth3

Read packets sent from the IP stack towards the eth3 interface

pfsend -i stack:eth3

Forge packets and send them to the IP stack as if they were received from the eth3 interface