hiya..

I wrote a program in C using lipcap library, and I connected MySQL server to log all the captured packets traffic, I am running Fedora3.

But I need to DROP the packets or forwarding them, Can I do that with libpcap ? if not, how can I do it ?

note: I need a function that I can embedded in my program.

thanks for the help

Hi,
basically, when people want to resend packets sniffed with the libpcap, they use libnet.
this lib enable you to send raw packets over the network (you build the whole packet from scratch) or, as an example, to give the DNS parameters of a DNS packet and ask libnet to build the DNS reply, the UDP trame, the IP packet and the Ethernet one.
In your case, your program would decide what to do with the packets depending on the info read from libpcap and use libnet functions to forward them.
Please also note that you can use iptables rules to do all that... chances are that the netfilter developpers have a much better implementation of all that than you'll have... (sorry, you may be a C guru as well ;o) )

Hope this helps!

Thanks ALOT ALOT ALOT