Hi all,
I want to capture packets which are being sent by an application from my own machine and i want to capture them before they actually go to wire. What i want to do like ...i want to capture the Ipv4 packet sent by my applications to some special address ( like some subnet 10.0.0.1/24 ) and drop the packet from being sent on wire. Then modify that to Ipv6 packet ( by doing some map Ipv4 -> Ipv6) and Then put the modified Ipv6 packet into the kernel queue ...for routing stuff.
Currently, I tried with Raw-sockets with 'PF_PACKET' flag but that doesn't work out. By Raw-sockets, I am actually able to capture packets which are on the wire but not which i was intend to capture ?

Any help would be appreciated !

thanks in advance,
flukebox

okk, i am able to capture packet by libpcap interface. but the problem i am facing now is that i am only able to send packet directly on the wire. but i want the packet to be send such that it goes through kernel. any idea, how can put modified packet to kernel networking stack queue ???
-- flukebox

hmm... I think iptables can come in handy for your problem, though I don't know the exact filters/mangle you may need to write.

ip6tables will capture packets and modify them and put them back to the kernel Q.