Hi,
I'm least bothered about the packets other than IP, I'm using "IOEthernetController/IONetworkController/IONetworkInterfaceto create the network interface and able see data link layer (DLIL) packets [ARP, IP, etc ....], Is there a way, where I can get the only Network layer packets on interface in kernel space[now I'm able to strip ethernet header in case of IOEthernetController and continue further],
coming to my question:
I want to snoop the ARP requests within the driver space, I'm trying to use the following method as a reponse to the ARP request, does this solves my problem in spoofing,
unable to link/load with the "kern extension", what need to be added in OSBuldleLibraries so that it will load [tried with "kernlibs -xml" but didn't get the required info]
"inet_arp_handle_input()"
Thanks
Venkat