blocks|key|1274001|text|取决于您所说的终止连接是什么意思。您可能意味着为TCP电路或UDP流提供一个端点.|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1274002|或者，您可以在TCP流的中间发送一个可接受的RST，以指示流的结束。要实现这一点，您必须知道其他方面所期望的序列号。|1274003|无论哪种方式，很明显你在课堂上都没有注意到。整个分配的目的似乎是向您展示IP数据包的原始布局，以及可能的TCP/UDP。我建议你购买一本关于这一主题的教科书(无疑是你的讲师推荐的)和/或阅读维基百科。|1274004|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

Depends on what you mean by terminate connections. You might mean providing an end-point for a TCP circuit or UDP stream.

Or you could mean sending an acceptable RST in the middle of a TCP stream to indicate the end of the stream. To achieve this you have to know the sequence number expected by the other side amongst other things.

Either way it is obvious you haven't been paying attention in class. The entire point of the assignment, it seems, is to show you understand the raw layout of IP packets and possibly TCP/UDP. I suggest you purchase a textbook on the subject (no doubt recommended by your lecturer) and/or take a read of Wikipedia.

blocks|key|1485963|text|对于这个分配，我将使用帕帕奇，它是一个python和injection库。Pypcap使用原始套接字来伪造数据包。如果由于某些奇怪的原因，您被迫使用C，那么这个项目将更加困难。在这种情况下，您应该使用libpcap来探测行，原始套接字库将取决于您开发的平台。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1485964|你可以嗅探线路，寻找TCP序列id。基于这个id，你可以伪造一个RST或FIN来破坏连接的一侧。困难的部分将试图使用原始套接字来维护TCP连接。维护应用层连接几乎是不可能的，HTTP将是一个更容易维护的协议，但如果是http，只需劫持cookie就更容易了。|1485965|entityMap|0|LINK|mutability|MUTABLE|url|http://code.google.com/p/pypcap/^0|B|3|0|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]]|C|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@]|C|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]]]

For this assignment I would use <a href="http://code.google.com/p/pypcap/" rel="nofollow noreferrer">pypacp</a>, which is a python packet capture and injection library. Pypcap uses raw sockets to forge packets. If for some strange reason you are forced to use C then this project will be more difficult. In this case you should use libpcap to sniff the line and the raw socket library will depend on the platform you develop on. 

You can sniff the line looking for TCP sequence ID's. Based on this id you can forge a RST or FIN to break one side of the connection. The hard part will be trying to maintain the TCP connection using raw sockets. It will be nearly impossible to maintain the application layer connection, HTTP would be an easier protocol to maintain but if it was http it would be easier to just hijack the cookie.

blocks|key|1486021|text|我不能帮你做C库--这不是我的强项，但似乎应该有一些东西存在。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1486022|但是，你在第2部分中试图做的似乎是防止DOS，而不是导致DOS！|1486023|检查这里：|1486024|攻打|offset|length|1486025|关于DoS攻击的信息。正如PP所说，有许多与滥用连接有关的攻击，所以您想知道您的辅助是关于哪一种--您需要与您的教授检查一下。例如，上面的Wiki页面提到了SYN洪流--但是几乎任何面向连接的协议都将面临攻击的风险，这种攻击会使连接池被过多的连接请求填满，然后永远不会关闭它们。|1486026|我认为，阅读该任务，您的工作是通过关闭攻击者打开的连接来解决这个问题。这意味着你们都必须弄清楚攻击是如何运作的，然后再想办法从攻击中恢复过来。|1486027|提示:使用大量的紧密连接请求攻击服务器并不是攻击。这也没什么用，因为你不一定要关闭打开的连接。但损坏是由开放连接请求造成的。见这里：|1486028|洪涝|1486029|举个例子|1486030|entityMap|0|LINK|mutability|MUTABLE|url|http://en.wikipedia.org/wiki/Denial-of-service_attack|1|http://en.wikipedia.org/wiki/SYN_flood^0|0|0|0|0|2|0|0|0|0|0|0|2|1|0|0^^$0|@$1|2|3|4|5|6|7|13|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|14|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|15|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|16|8|@]|9|@$H|17|I|18|1|19]]|A|$]]|$1|J|3|K|5|6|7|1A|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|1B|8|@]|9|@]|A|$]]|$1|N|3|O|5|6|7|1C|8|@]|9|@]|A|$]]|$1|P|3|Q|5|6|7|1D|8|@]|9|@$H|1E|I|1F|1|1G]]|A|$]]|$1|R|3|S|5|6|7|1H|8|@]|9|@]|A|$]]|$1|T|3|-4|5|6|7|1I|8|@]|9|@]|A|$]]]|U|$V|$5|W|X|Y|A|$Z|10]]|11|$5|W|X|Y|A|$Z|12]]]]

I can't help you with C libraries - not my forte, but it seems like there should be something out there.

But it seems like what you are trying to do in part 2 is to prevent a DOS, not cause one!

Check here:

<a href="http://en.wikipedia.org/wiki/Denial-of-service_attack" rel="nofollow noreferrer">http://en.wikipedia.org/wiki/Denial-of-service_attack</a>

for stuff on DoS attacks. As PP says, there are a number of attacks relating to connection misuse, so you want to figure out which one your assigment is about - that one you need to check out with your prof. For example, the Wiki page above mentions SYN Floods - but almost any connection oriented protocol will be at risk for an attack that fills up the connection pool with too many connection requests and then doesn't ever close them.

I assume, reading the assignment, that your job is to figure out how to fix this by closing the connections that the attacker opened. Which means you both have to figure out how the attack works, and then figure out how to recover from it.

HINT: Hitting the server with a flood of close-connection requests is not an attack. It's not that useful, either, since you aren't necessarily closing the connections that are open. But the damage is caused by open-connection requests. See here:

<a href="http://en.wikipedia.org/wiki/SYN_flood" rel="nofollow noreferrer">http://en.wikipedia.org/wiki/SYN_flood</a>

For one example.

blocks|key|1486064|text|您可以使用libpcap来帮助进行数据包嗅探。libpcap是由tcpdump团队开发的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1486065|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

you can use libpcap to help with the packet sniffing. libpcap was developed by the tcpdump team.

I have to write a program that sniffs network packets (part1-the simple part). 
And I have to update the program (part2) so that it will be able to terminate connections. 
The specific requirements are:

<blockquote>
 Construct raw packets by specifying data link layer and network layer information including appropriate source and destination MAC and IP addresses. These packets are intended to terminate the connection. To do so, you should used SOCK_RAW as the socket type to be able to set the header information by yourself. 
</blockquote>

Can anybody give me some ideas on the second part? 
Should I hijack the session, apply a DoS attack on one of the users?

All I need is some tips of how to terminate the connection.
I am using the C programming language, and this is a course assignment for the security course.

Inject a packet to terminate a TCP connection

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我必须编写一个嗅探网络数据包的程序(第一部分--简单部分)。我必须更新程序(part2)，以便它能够终止连接。具体要求是：通过指定数据链路层和网络层信息(包括适当的源和目的地MAC和IP地址)来构造原始数据包。这些数据包旨在终止连接。为此，您应该使用SOCK_RAW作为套接字类型，以便能够自行设置标头信息。有人能给我一...

问注入数据包以终止TCP连接
EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问注入数据包以终止TCP连接EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问注入数据包以终止TCP连接
EN