Printable View
hi,
i need some help and idea about my project."packet marking of ip spoofing". i've lack of security knowledge..so i need the idea what should i do and tools that i can use to identify the ip spoofing..
if i want to modify the packet.let say i want to add a feature into it.. what programming language i should use?
please help me...tq
You can use hping to craft/modify packets. I recommend you also become very familiar with wireshark so you can see exactly what is going on.
As far as how to detect spoofing... there are many tools that already exist to detect this activity as well as numerous research papers about it.
I suggest you ask google. detecting spoofed packets would be a good starting search. You'll be reading a while. I enjoy the articles on security focus such as this.
First of all you'll need a good understanding of "regular" TCP/IP.
If you don't know how it normally works then you won't be able to tell the difference between a normal packet and a spoofed one.
If you are using IE, Fiddler2 is also a good tool to see exactly what is happening in a browser session.
It was written at Microsoft, but now has a life of its own. It only works with IE.