Network Device Development - Part 5: Firewall 104 ~ Packet Splitter

•

17 likes•2,500 views

Cheng-Yi Yu

Network Device Development Part 5: Firewall 104 ~ Packet Splitter How to develop a network device like firewall

Software

SEAN
Network Device
Development
PART 5 – Firewall 104: Packet Splitter

Sean
• Developer
• erinus.startup@gmail.com
• https://www.facebook.com/erinus

GitHub
https://github.com/erinus/NetworkDeviceDevelop
ment

Read Me
It is a series of training. If you have no experience
on kernel module development, you must view
other presentations.
1. Network Device Development - Part 1: Switch
http://www.slideshare.net/erinus/network-device-
development-part-1-switch
2. Network Device Development - Part 2: Firewall
101
http://www.slideshare.net/erinus/network-device-
development-part-2-firewall-101

3. Network Device Development - Part 3: Firewall
102 ~ IP Filter
http://www.slideshare.net/erinus/network-device-
development-part-3-firewall-102-ip-filter
4. Network Device Development - Part 4: Firewall
103 ~ Protocol Filter & Payload Filter & Payload
Modifier
http://www.slideshare.net/erinus/network-device-
development-part-4-firewall-103-protocol-filter-
payload-filter-payload-modifier

IP Fragmentation
IP Header
TCP Header
TCP Payload

IP Fragmentation
IP Header
TCP Header
TCP Payload
IP Header
TCP Header
TCP Payload
IP Header
TCP Payload

IP Fragmentation
IP Header
TCP Header
TCP Payload
IP Header
TCP Header
TCP Payload
IP Header
TCP Payload
IP_MF
IP_DF

IP Fragmentation
IP Header
TCP Header
TCP Payload
IP Header
TCP Header
TCP Payload
IP Header
TCP Payload
re-calculate checksum re-calculate checksum

Create HTTP Server on CLIENT of VMnet3
$ sudo python server.py

Test on CLIENT of VMnet2
Open Web Browser and connect:
1. http://192.168.103.128/ Success
2. http://192.168.103.128/test Success
3. http://192.168.103.128/song Success

What's hot

Installation of DAHDI, libpri and Asterisk CaudalFin Technologies

Hardening Linux and introducing Securix LinuxSecurity Session

visagie_freebsdwebuploader

Buildstrapping AloofixKevin Johnson

Shutdown agent for_v_mware_esxmoy725

Kali tools list with short descriptionJose Moruno Cadima

OSDC 2018 | OPNsense: the “open” firewall for your datacenter by Thomas Niede...NETWAYS

Security Onion Conference - 2016DefensiveDepth

firmware hacking, slash the pineapple for fun (codebali 2015)Rama Nanda

Setting up Cisco WSA Proxy in Transparent and Explicit ModeDhruv Sharma

Gns3 0.5 Tutorialrusevi

LT04 IDNOG04 - Affan Basalamah (ITB) - Documenting your networkIndonesia Network Operators Group

How to configure cisco asa virtual firewallIT Tech

opensuse conference 2015: security processes and technologies for TumbleweedMarcus Meissner

Router Virtualization With GNS3mrmouse

Long-term Maintenance Model of Embedded Industrial Linux DistributionSZ Lin

Distributed Compiler IceccSZ Lin

Demoanoop_wi

Webinar: Automate IBM Connections Installations and morepanagenda

Shell Shock (Bash Bug)Kurapati Vishwak

What's hot (20)

Installation of DAHDI, libpri and Asterisk

Hardening Linux and introducing Securix Linux

visagie_freebsd

Buildstrapping Aloofix

Shutdown agent for_v_mware_esx

Kali tools list with short description

OSDC 2018 | OPNsense: the “open” firewall for your datacenter by Thomas Niede...

Security Onion Conference - 2016

firmware hacking, slash the pineapple for fun (codebali 2015)

Setting up Cisco WSA Proxy in Transparent and Explicit Mode

Gns3 0.5 Tutorial

LT04 IDNOG04 - Affan Basalamah (ITB) - Documenting your network

How to configure cisco asa virtual firewall

opensuse conference 2015: security processes and technologies for Tumbleweed

Router Virtualization With GNS3

Long-term Maintenance Model of Embedded Industrial Linux Distribution

Distributed Compiler Icecc

Demo

Webinar: Automate IBM Connections Installations and more

Shell Shock (Bash Bug)

Similar to Network Device Development - Part 5: Firewall 104 ~ Packet Splitter

Aikau testing tech talk live 83 20150204David Webster

James Jara Portfolio 2014 - InfoSec White Paper- Part 5James Jara

Chapter 9 lab a security policy development and implementation (instructor ve...wosborne03

System hardening - OS and Applicationedavid2685

Splunk: Forward me the REST of those shellsAnthony D Hendricks

Taishaun_OwnensCNS-533_LabTaishaun Owens

Data market developer exercisesAitor Magán García

Metasploitation part-1 (murtuja)ClubHack

Breach and attack simulation toolsBangladesh Network Operators Group

Attacking Embedded Devices (No Axe Required)Security Weekly

Hacking IoT with EXPLIoT FrameworkPriyanka Aash

Developing for Industrial IoT with Linux OS on DragonBoard™ 410c: Session 4Qualcomm Developer Network

MR201408 SE for Android OverviewFFRI, Inc.

Website Testing Practicesdeseomar

Selenium 2 for PHP(Unit)AOE

Cloud stack monitoring with zenossShanker Balan

Android Things Security Research in Developer Preview 2 (FFRI Monthly Researc...FFRI, Inc.

AEM hacker - approaching Adobe Experience Manager webapps in bug bounty programsMikhail Egorov

TRITON: How it Disrupted Safety Systems and Changed the Threat Landscape of I...Priyanka Aash

Universal UserlandSean Chittenden

Similar to Network Device Development - Part 5: Firewall 104 ~ Packet Splitter (20)

Aikau testing tech talk live 83 20150204

James Jara Portfolio 2014 - InfoSec White Paper- Part 5

Chapter 9 lab a security policy development and implementation (instructor ve...

System hardening - OS and Application

Splunk: Forward me the REST of those shells

Taishaun_OwnensCNS-533_Lab

Data market developer exercises

Metasploitation part-1 (murtuja)

Breach and attack simulation tools

Attacking Embedded Devices (No Axe Required)

Hacking IoT with EXPLIoT Framework

Developing for Industrial IoT with Linux OS on DragonBoard™ 410c: Session 4

MR201408 SE for Android Overview

Website Testing Practices

Selenium 2 for PHP(Unit)

Cloud stack monitoring with zenoss

Android Things Security Research in Developer Preview 2 (FFRI Monthly Researc...

AEM hacker - approaching Adobe Experience Manager webapps in bug bounty programs

TRITON: How it Disrupted Safety Systems and Changed the Threat Landscape of I...

Universal Userland

Recently uploaded

VK Business Profile - provides IT solutions and Web Developmentvyaparkranti

Precise and Complete Requirements? An Elusive GoalLionel Briand

How to submit a standout Adobe Champion ApplicationBradBedford3

Introduction Computer Science - Software Design.pdfFerryKemperman

KnowAPIs-UnknownPerf-jaxMainz-2024 (1).pptxTier1 app

Software Coding for software engineeringssuserb3a23b

GOING AOT WITH GRAALVM – DEVOXX GREECE.pdfAlina Yurenko

Recruitment Management Software Benefits (Infographic)Hr365.us smith

Odoo 14 - eLearning Module In Odoo 14 Enterprisepreethippts

SpotFlow: Tracking Method Calls and States at Runtimeandrehoraa

cpct NetworkING BASICS AND NETWORK TOOL.pptrcbcrtm

Unveiling the Future: Sylius 2.0 New FeaturesŁukasz Chruściel

What is Advanced Excel and what are some best practices for designing and cre...Technogeeks

Powering Real-Time Decisions with Continuous Data StreamsSafe Software

A healthy diet for your Java application Devoxx France.pdfMarharyta Nedzelska

办理学位证(UQ文凭证书)昆士兰大学毕业证成绩单原版一模一样umasea

MYjobs Presentation Django-based projectAnoyGreter

Open Source Summit NA 2024: Open Source Cloud Costs - OpenCost's Impact on En...Matt Ray

Catch the Wave: SAP Event-Driven and Data Streaming for the Intelligence Ente...confluent

英国UN学位证,北安普顿大学毕业证书1:1制作qr0udbr0

Recently uploaded (20)

VK Business Profile - provides IT solutions and Web Development

Precise and Complete Requirements? An Elusive Goal

How to submit a standout Adobe Champion Application

Introduction Computer Science - Software Design.pdf

KnowAPIs-UnknownPerf-jaxMainz-2024 (1).pptx

Software Coding for software engineering

GOING AOT WITH GRAALVM – DEVOXX GREECE.pdf

Recruitment Management Software Benefits (Infographic)

Odoo 14 - eLearning Module In Odoo 14 Enterprise

SpotFlow: Tracking Method Calls and States at Runtime

cpct NetworkING BASICS AND NETWORK TOOL.ppt

Unveiling the Future: Sylius 2.0 New Features

What is Advanced Excel and what are some best practices for designing and cre...

Powering Real-Time Decisions with Continuous Data Streams

A healthy diet for your Java application Devoxx France.pdf

办理学位证(UQ文凭证书)昆士兰大学毕业证成绩单原版一模一样

MYjobs Presentation Django-based project

Open Source Summit NA 2024: Open Source Cloud Costs - OpenCost's Impact on En...

Catch the Wave: SAP Event-Driven and Data Streaming for the Intelligence Ente...

英国UN学位证,北安普顿大学毕业证书1:1制作

Network Device Development - Part 5: Firewall 104 ~ Packet Splitter

1. SEAN Network Device Development PART 5 – Firewall 104: Packet Splitter

2. Sean • Developer • erinus.startup@gmail.com • https://www.facebook.com/erinus

3. GitHub https://github.com/erinus/NetworkDeviceDevelop ment

4. Read Me It is a series of training. If you have no experience on kernel module development, you must view other presentations. 1. Network Device Development - Part 1: Switch http://www.slideshare.net/erinus/network-device- development-part-1-switch 2. Network Device Development - Part 2: Firewall 101 http://www.slideshare.net/erinus/network-device- development-part-2-firewall-101

5. 3. Network Device Development - Part 3: Firewall 102 ~ IP Filter http://www.slideshare.net/erinus/network-device- development-part-3-firewall-102-ip-filter 4. Network Device Development - Part 4: Firewall 103 ~ Protocol Filter & Payload Filter & Payload Modifier http://www.slideshare.net/erinus/network-device- development-part-4-firewall-103-protocol-filter- payload-filter-payload-modifier

6. First Packet Splitter

7. IP Fragmentation IP Header TCP Header TCP Payload

8. IP Fragmentation IP Header TCP Header TCP Payload IP Header TCP Header TCP Payload IP Header TCP Payload

9. IP Fragmentation IP Header TCP Header TCP Payload IP Header TCP Header TCP Payload IP Header TCP Payload IP_MF IP_DF

10. IP Fragmentation IP Header TCP Header TCP Payload IP Header TCP Header TCP Payload IP Header TCP Payload re-calculate checksum re-calculate checksum

11. Modify main.c

12. Modify main.c

13. Modify main.c

14. Install $ make $ make install $ dmesg

15. Test your Firewall

16. Create HTTP Server on CLIENT of VMnet3 $ sudo python server.py

17. Test on CLIENT of VMnet2 Open Web Browser and connect: 1. http://192.168.103.128/ Success 2. http://192.168.103.128/test Success 3. http://192.168.103.128/song Success

25. Next Part

26. Firewall 201