debugging - 以太网(或至少 TCP)数据包调试，具有设置断点和修改数据包的能力

Question

Fiddler 是一种 HTTP 代理，除其他外，它允许暂停传出和传入的 HTTP 数据包、修改其内容并继续。

在 OSI 模型的较低层是否有类似的工作？特别是，我希望能够暂停 TCP ACK 数据包，然后让它继续通过管道。 *nix 或 Windows 的建议表示赞赏。

Answer 1

您可能会对这两个工具感兴趣。

来自Wireshark Tools Wiki :

Nemesis is a command-line network packet crafting and injection utility. Nemesis can natively craft and inject ARP, DNS, ETHERNET, ICMP, IGMP, IP, OSPF, RIP, TCP and UDP packets. (GPL, BSD/Linux/Solaris/Mac OSX/Win32)

您可能还想查看 Winsock Packet Editor :

WPE Pro 0.9a (Windows XP, 2003, Vista, 7), 1.3 (Windows 95, 98, ME, 2000) Winsock Packet Editor (WPE) Pro is a packet sniffing/editing tool which is generally used to hack multiplayer games. WPE Pro allows modification of data at TCP level. Using WPE Pro one can select a running process from the memory and modify the data sent by it before it reaches the destination. It can record packets from specific processes, then analyze the information. You can setup filters to modify the packets or even send them when you want in different intervals. WPE Pro could also be a useful tool for testing thick client applications or web applications which use applets to establish socket connections on non http ports.