????????

????Tcpcopy
??????????Tcpcopy???????????????????????????????????????????????raw socket input ?????????????pcap ????????????Libpcap??Packet Capture Libray???????写????????????????????????C???????????????????????????????????y??????????????????????????????Tcpdump????Libpcap????????????????Libpcap????????????????????????????泄????????????????????????慰?http://www.cnblogs.com/coder2012/archive/2013/04/13/3012390.html??????????????????????????????????Pcap???????????????锟�?
????./configure --enable-advanced --enable-pcap
????make
????make install
??????????????????????????Raw socket output ????????????Raw Socket?????????????锟�? ./tcpcopy -x 80-?????IP:?????????? -s ?????????IP -i eth0 ??????-i???????pcap??????????????????
????????????????????pcap_inject?????????????--enable-dlinject?????????????pcap_inject??????????????1.???????????????IP???????????????tcpcopy??????????????IP?????????????IP??????????????????????????????????????????锟�?????pacp_inject??????????路????????????IP??????????????2.???????????????????pcap_inject ?????????????????????????????pcap_inject ???????????30%??????(?????????)??????pcap_inject????????????????????????????????????????????????????tcpdump??????????.
????Pcap????????sudo ./tcpcopy -x ???????@???????????????????-?????????IP???:???????????@???????????? -s ????intercept?????IP??? -o ?????????璞� -i ????????璞�??
?????????????
?????????????????????????????路???????????????????贸?????????路?????????????????????????????????锟�?
??????????????????????IP?????路??
????route del default gw ?????????IP
???????????????????IP?????????????????路??
????route add default gw ????????????????IP
??????????????????????????????????????????????????-????????????????IP??????????????????锌???路????????????些???????????????????????ip??drop???????internet?????????????????????????????路???????些?????
??????????????
??????????????????????????????????????????????????????????????????锌???路????cat /proc/sys/net/ipv4/ip_forward???0?????锌???????????????????????pcap???????????????????锟�?
????./configure --enable-advanced --enable-pcap
????make
????make install
??????????????intercept???????pcap?????????贸?????????????????????????????tcpcopy????????????????????
????小??
????Tcpcopy??????????????????????些???绻�????????鑷�?????????????????rawsocket+iptable+netlink??????pacp+route????????????????????????????????????????????些??????????????????????????????
?????????????????????????????????????贸???????????????????????????????????linux??IP_QUEUE??椋�????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????蔚????????????????????????????????????????????????