kinda hack?

[Donghyuk Woo]

Hello, all
 
I tried some interesting experiment today.
 
First, I made an udp client on Linux machine (w/ hostap) which sends
meaningless 1200 bytes-long packet three times to my laptop.
I could definitely see these packets delievered to the laptop by sniffing
the medium (I use AiroPeek).
 
Second, I modified hostap_data_start_xmit of hostap_80211_tx.c.
I changed addr1 field (destination address) to another address which doesn't
exist on the network if the packet was generated by my udp client program,
(I compared the udp port number.) and then called dev_queue_xmit.
However, I counldn't find out those packets !!!
 
I assumed that the address was checked by the kernel and NIC would merely
send this packet.
 
What would prevent this packet from being delivevered?
Does NIC have its own association table or something?
 
Regards,
 
==========================
 
Woo, Donghyuk
 
 <http://www.shine21.pe.kr/> http://www.shine21.pe.kr
 <mailto:shine21 at korea.com> shine21 at korea.com
 
==========================
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20040819/037a50d4/attachment.htm