-1

I use raw socket to create TCP packets, with focus on the sequence number and TCP flags(SYN, ACK)

I used one machine S to send a tcp ACK packet (flag ACK is set to 1) and another machine R to receive it these two machines are in different subnets, all in my school

meanwhile, I used tcpdump to capture the packets.

Strange things happens! On machine S, the captured packet is as expected, it is an ACK packet however, on the receiving machine R, the packet becomes a SYN packet, and the sequence number is changed, the seq no is 1 smaller the expected and the ack_seq become 0!

what are potential problems? my guess is that the router/firewall modified the ACK packet to a SYN packet because it never sees a SYN SYN/ACK exchange ahead of the ACK? is it possible or not?

the two captured packets are:

https://docs.google.com/file/d/0B09y_TWqTtwlVnpuUlNwUmM1YUE/edit?usp=sharing https://docs.google.com/file/d/0B09y_TWqTtwlTXhjUms4ZnlkMVE/edit?usp=sharing

1 Answer 1

0

The biggest problem you will encounter will be that the receiving TCP stack in each case will receive the packet and possibly reply to it. What you are attempting is really not possible.

2
  • I don't care the consequence at the moment, I just hope the receving host can receive the packet correctly!
    – user138126
    Mar 17, 2013 at 23:22
  • It's not very likely. You still haven't answer the question as to what this is all about.
    – user207421
    Mar 17, 2013 at 23:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.