Hello,
Currently I'm writing a thesis about steganography. The focus is to
hide information (and extract the hidden info.) in the TCP/IP header.
I'm about to conduct a small experiment. In a Linux host, a module of
some kind shall catch all outgoing network packets and modify them
before they are sent.
Now to the question: How can I modify _all_ outgoing/incoming network
packages from/to a Linux host? The fundamental functionality is thus
the ability to modify network packages.
Can I use raw sockets?
I've seen an example of a kernel module that drops network packages
randomly. Would this be a better approach perhaps?
Any information is greatly appreciated!
Regards,
-olle-