Hi, I want to know if it is possible to spoof(UDP) the original source IP of a message that has already been forwarded. Server1 (Original Source)--> Server2 (Forwarding Syslog Server )--> Server3 (Server Source Spoofing Server1) --> Final Dest. Thanks, AMM
I should also add that the original source IP is in the payload of the message. On Mon, Mar 22, 2010 at 3:42 PM, AM M84 <ammak49@gmail.com> wrote:
Hi, I want to know if it is possible to spoof(UDP) the original source IP of a message that has already been forwarded.
Server1 (Original Source)--> Server2 (Forwarding Syslog Server )--> Server3 (Server Source Spoofing Server1) --> Final Dest.
Thanks, AMM
On Mon, 2010-03-22 at 15:43 -0700, AM M84 wrote:
I should also add that the original source IP is in the payload of the message.
no without changing the source code. with that it might be possible. (you'd have to change the IP address stored in logmsg->saddr somewhere along the path). With the newly announced (but not yet integrated plugins branch), something like this would become easily doable. -- Bazsi
participants (2)
-
AM M84
-
Balazs Scheidler