As for changing the MAC address in Linux, this way works as well as any
application; however, apparently this technique only works on eth0.
284 Practical Hacking Techniques and Countermeasures
Lab 51: Packet Injection/Capture/Trace
Send Packets via a False IP/MAC Address: Packit
Prerequisites: None
Countermeasures: Firewall filters, vendor patches where applicable
Description: Packit is a network-auditing tool. Its value is derived from
its ability to customize, inject, monitor, and manipulate IP traffic. By
allowing you to define (spoof) all Transfer Control Protocol (TCP), User
Datagram Protocol (UDP), ICMP, IP, Address Resolution Protocol
(ARP), Reverse Address Resolution Protocol (RARP), and Ethernet
header options, Packit can be useful in testing firewalls, intrusion
detection systems, port scanning, simulating network traffic and general
TCP/IP auditing. Packit is also an excellent tool for learning TCP/IP.
Remember that all commands in Linux are case sensitive.
Procedure: Compile, create, set parameters, and execute with the following
syntax:
Packet capture:
./packit -m capture [-cGHnvsX] [-i interface] [-r|-w
file] expression
Packet injection:
./packit -m inject [-t protocol] [-aAbcCdDeFgGhHjJkKlLm-
MnNoOpPqQrRsSTuUvwWxXyYzZ] [-i interface]
Packet trace:
./packit -m trace [-cGHnvsX] [-i interface]
[-r|-w file] expression
From the directory containing the compressed files, type tar ??“zxvf packit-
1.
Pages:
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124