nemesis-ethernet
—
Ethernet Protocol (The Nemesis Project)
nemesis-ethernet |
[ -vZ? ]
[-d
IFNAME ]
[-H
MAC ]
[-M
MAC ]
[-P
FILE ]
[-T
TYPE ] |
nemesis
is designed to be a command
line-based, portable human IP stack for UNIX-like and Windows systems. The
suite is broken down by protocol, and should allow for useful scripting of
injected packets from simple shell scripts.
nemesis-ethernet
provides an interface to
craft and inject Ethernet frames allowing the user to inject an entirely
arbitrary Ethernet frame.
-d
IFNAME
- Specify the name, for UNIX-like systems, or number, for Windows systems,
of the IFNAME to use (eg. fxp0, eth0,
hme0, 1).
-H
MAC
- Specify the source MAC address (XX:XX:XX:XX:XX:XX).
-M
MAC
- Specify the destintion MAC address (XX:XX:XX:XX:XX:XX).
-P
FILE
- This will cause nemesis-ethernet to use the specified payload
FILE as the payload when injecting
Ethernet frames. The maximum payload size is 1500 bytes in order to
account for the maximum Ethernet frame size. Payloads can also be read
from stdin by specifying
-P-
instead.
The payload file can consist of any arbitrary data though it will be most
useful to create a payload resembling the structure of a packet type not
supported by nemesis. Used in this manner, virtually any link layer frame
can be injected.
-T
TYPE
- Specify the Ethernet type/length field, as an integer. Valid Ethernet
types include, for instance:
- 0x0200
- PUP
- 0x0800
- IP
- 0x0806
- ARP
- 0x8035
- RARP
- 0x8100
- 802.1Q
- 0x86dd
- IPv6
- 0x8863
- PPPOE discovery
- 0x8864
- PPPOE session
-v
- Display the injected packet in human readable form. Use twice to see a
hexdump of the injected packet with printable ASCII characters on the
right. Use three times for a hexdump without decoded ASCII.
-Z
- Lists available network interfaces by number for use in link-layer
injection.
NOTE: This feature is only relevant to Windows
systems.
nemesis-ethernet
returns 0 on a successful
exit, 1 if it exits on an error.
nemesis-arp(1),
nemesis-dhcp(1),
nemesis-dns(1),
nemesis-icmp(1),
nemesis-igmp(1),
nemesis-ip(1),
nemesis-ospf(1),
nemesis-rip(1),
nemesis-tcp(1),
nemesis-udp(1).
Jeff Nathan
<
jeff@snort.org>
Please report at
https://github.com/libnet/nemesis/issues