Rawlink is an ocaml library for sending and receiving raw packets at the link layer level. Sometimes you need to have full control of the packet, including building the full ethernet frame.
The API is platform independent, it uses BPF on real UNIXes and AF_SOCKET on linux. Some functionality is sacrificed so that the API is portable enough.
Currently BPF and AF_PACKET are implemented, including filtering capabilities.
Writing a BPF program is a pain in the ass, so no facilities are provided for
it. If you need a BPF filter, I suggest you write a small .c file with a
function that returns the BPF program as a string, check
- 28 Aug 2022