L I B N E T D U D E The NETwork DUmp data Displayer and Editor Packet Manipulation Library http://netdude.sourceforge.net Christian Kreibich <christian@whoop.org> ------------------------------------------------------------------------ Libnetdude is the part of Netdude that contains all of the packet inspection and manipulation functionality, without the GUI part. Its purpose is to provide a flexible and useful means to quickly write programs that iterate over tcpdump tracefiles, performing manipulations of the packets read. Libnetdude provides simple mechanisms to, for example, retrieve the TCP header of packet, manipulate fields in it, and fix the checksum afterwards. Libnetdude provides support for tracefiles of arbitrary size. Packets can simply be read sequentially, or you can navigate around in the trace by jumping to specific offsets in the trace, both in terms of space and time. Libnetdude sports a flexible architecture that can easily be extended to support new protocols. This package includes support for Ethernet, FDDI, 802.11, SNAP, Linux SL, ARP, ICMP, IP, TCP, and UDP. ------------------------------------------------------------------------ http://www.cl.cam.ac.uk/Research/SRG/ http://www.icir.org ------------------------------------------------------------------------