nftables section
Some checks failed
Build and Deploy MITM Webserver / build (push) Has been cancelled
Build and Deploy MITM Webserver / traffic_target (push) Has been cancelled

This commit is contained in:
2026-08-08 17:12:07 +02:00
parent a4b19f8c3e
commit 68827ed7e3
2 changed files with 335 additions and 184 deletions

View File

@@ -1,316 +1,326 @@
@article{cerf1974protocol,
author = {Cerf, Vinton G. and Kahn, Robert E.},
title = {A Protocol for Packet Network Intercommunication},
author = {Cerf, Vinton G. and Kahn, Robert E.},
title = {A Protocol for Packet Network Intercommunication},
journaltitle = {IEEE Transactions on Communications},
volume = {22},
number = {5},
pages = {637--648},
date = {1974-05},
doi = {10.1109/TCOM.1974.1092259}
volume = {22},
number = {5},
pages = {637--648},
date = {1974-05},
doi = {10.1109/TCOM.1974.1092259}
}
@techreport{rfc791,
author = {Postel, Jon},
title = {Internet Protocol},
type = {RFC},
number = {791},
author = {Postel, Jon},
title = {Internet Protocol},
type = {RFC},
number = {791},
institution = {RFC Editor},
date = {1981-09},
doi = {10.17487/RFC0791}
date = {1981-09},
doi = {10.17487/RFC0791}
}
@techreport{rfc793,
author = {Postel, Jon},
title = {Transmission Control Protocol},
type = {RFC},
number = {793},
author = {Postel, Jon},
title = {Transmission Control Protocol},
type = {RFC},
number = {793},
institution = {RFC Editor},
date = {1981-09},
doi = {10.17487/RFC0793}
date = {1981-09},
doi = {10.17487/RFC0793}
}
@techreport{rfc1122,
author = {Braden, Robert},
title = {Requirements for Internet Hosts -- Communication Layers},
type = {RFC},
number = {1122},
author = {Braden, Robert},
title = {Requirements for Internet Hosts -- Communication Layers},
type = {RFC},
number = {1122},
institution = {RFC Editor},
date = {1989-10},
doi = {10.17487/RFC1122}
date = {1989-10},
doi = {10.17487/RFC1122}
}
@techreport{rfc1812,
author = {Baker, Fred},
title = {Requirements for {IP} Version 4 Routers},
type = {RFC},
number = {1812},
author = {Baker, Fred},
title = {Requirements for {IP} Version 4 Routers},
type = {RFC},
number = {1812},
institution = {RFC Editor},
date = {1995-06},
doi = {10.17487/RFC1812}
date = {1995-06},
doi = {10.17487/RFC1812}
}
@techreport{rfc3022,
author = {Srisuresh, Pyda and Egevang, Kjeld},
title = {Traditional {IP} Network Address Translator ({Traditional NAT})},
type = {RFC},
number = {3022},
author = {Srisuresh, Pyda and Egevang, Kjeld},
title = {Traditional {IP} Network Address Translator ({Traditional NAT})},
type = {RFC},
number = {3022},
institution = {RFC Editor},
date = {2001-01},
doi = {10.17487/RFC3022}
date = {2001-01},
doi = {10.17487/RFC3022}
}
@inproceedings{stephan2024packetpath,
author = {Stephan, Alexander and W{\"u}strich, Lars},
title = {The Path of a Packet Through the Linux Kernel},
author = {Stephan, Alexander and W{\"u}strich, Lars},
title = {The Path of a Packet Through the Linux Kernel},
booktitle = {Seminar IITM WS 23},
date = {2024},
doi = {10.2313/NET-2024-04-1\_16},
url = {https://www.net.in.tum.de/fileadmin/TUM/NET/NET-2024-04-1/NET-2024-04-1_16.pdf}
date = {2024},
doi = {10.2313/NET-2024-04-1\_16},
url = {https://www.net.in.tum.de/fileadmin/TUM/NET/NET-2024-04-1/NET-2024-04-1_16.pdf}
}
@inproceedings{hoilandjorgensen2018xdp,
author = {H{\o}iland-J{\o}rgensen, Toke and Brouer, Jesper Dangaard and Borkmann, Daniel and Fastabend, John and Herbert, Tom and Ahern, David and Miller, David},
title = {The {eXpress} Data Path: Fast Programmable Packet Processing in the Operating System Kernel},
author = {H{\o}iland-J{\o}rgensen, Toke and Brouer, Jesper Dangaard and Borkmann, Daniel and Fastabend, John and Herbert, Tom and Ahern, David and Miller, David},
title = {The {eXpress} Data Path: Fast Programmable Packet Processing in the Operating System Kernel},
booktitle = {Proceedings of the 14th International Conference on Emerging Networking Experiments and Technologies},
series = {CoNEXT '18},
pages = {54--66},
series = {CoNEXT '18},
pages = {54--66},
publisher = {Association for Computing Machinery},
location = {Heraklion, Greece},
date = {2018},
doi = {10.1145/3281411.3281443},
url = {https://doi.org/10.1145/3281411.3281443}
location = {Heraklion, Greece},
date = {2018},
doi = {10.1145/3281411.3281443},
url = {https://doi.org/10.1145/3281411.3281443}
}
@inproceedings{scholz2018ebpfpacketfiltering,
author = {Scholz, Dominik and Raumer, Daniel and Emmerich, Paul and Kurtz, Alexander and Lesiak, Krzysztof and Carle, Georg},
title = {Performance Implications of Packet Filtering with {Linux eBPF}},
author = {Scholz, Dominik and Raumer, Daniel and Emmerich, Paul and Kurtz, Alexander and Lesiak, Krzysztof and Carle, Georg},
title = {Performance Implications of Packet Filtering with {Linux eBPF}},
booktitle = {2018 30th International Teletraffic Congress},
series = {ITC 30},
pages = {209--217},
series = {ITC 30},
pages = {209--217},
publisher = {IEEE},
location = {Vienna, Austria},
date = {2018},
doi = {10.1109/ITC30.2018.00039},
url = {https://www.net.in.tum.de/fileadmin/bibtex/publications/papers/ITC30-Packet-Filtering-eBPF-XDP.pdf}
location = {Vienna, Austria},
date = {2018},
doi = {10.1109/ITC30.2018.00039},
url = {https://www.net.in.tum.de/fileadmin/bibtex/publications/papers/ITC30-Packet-Filtering-eBPF-XDP.pdf}
}
@online{gbadamosi2024ebpfruntime,
author = {Gbadamosi, Bolaji and Leonardi, Luigi and Pulls, Tobias and H{\o}iland-J{\o}rgensen, Toke and Ferlin-Reiter, Simone and Sorce, Simo and Brunstr{\"o}m, Anna},
title = {The {eBPF} Runtime in the {Linux} Kernel},
date = {2024-10-03},
eprint = {2410.00026},
author = {Gbadamosi, Bolaji and Leonardi, Luigi and Pulls, Tobias and H{\o}iland-J{\o}rgensen, Toke and Ferlin-Reiter, Simone and Sorce, Simo and Brunstr{\"o}m, Anna},
title = {The {eBPF} Runtime in the {Linux} Kernel},
date = {2024-10-03},
eprint = {2410.00026},
eprinttype = {arXiv},
doi = {10.48550/arXiv.2410.00026},
url = {https://arxiv.org/abs/2410.00026},
urldate = {2026-05-15}
doi = {10.48550/arXiv.2410.00026},
url = {https://arxiv.org/abs/2410.00026},
urldate = {2026-05-15}
}
@inproceedings{westphal2016bridgefiltering,
author = {Westphal, Florian},
title = {Bridge Filtering with {nftables}},
author = {Westphal, Florian},
title = {Bridge Filtering with {nftables}},
booktitle = {Proceedings of Netdev 1.1},
location = {Seville, Spain},
date = {2016},
url = {https://netdevconf.org/1.1/proceedings/papers/Bridge-filter-with-nftables.pdf},
urldate = {2026-05-15}
location = {Seville, Spain},
date = {2016},
url = {https://netdevconf.org/1.1/proceedings/papers/Bridge-filter-with-nftables.pdf},
urldate = {2026-05-15}
}
@article{conti2016mitmsurvey,
author = {Conti, Mauro and Dragoni, Nicola and Lesyk, Viktor},
title = {A Survey of {Man In The Middle} Attacks},
author = {Conti, Mauro and Dragoni, Nicola and Lesyk, Viktor},
title = {A Survey of {Man In The Middle} Attacks},
journaltitle = {IEEE Communications Surveys \& Tutorials},
volume = {18},
number = {3},
pages = {2027--2051},
date = {2016},
doi = {10.1109/COMST.2016.2548426},
url = {https://doi.org/10.1109/COMST.2016.2548426}
volume = {18},
number = {3},
pages = {2027--2051},
date = {2016},
doi = {10.1109/COMST.2016.2548426},
url = {https://doi.org/10.1109/COMST.2016.2548426}
}
@article{nam2012arpmitm,
author = {Nam, Seung Yeob and Jurayev, Sirojiddin and Kim, Seung-Sik and Choi, Kwonhue and Choi, Gyu Sang},
title = {Mitigating {ARP} Poisoning-Based {Man-in-the-Middle} Attacks in Wired or Wireless {LAN}},
author = {Nam, Seung Yeob and Jurayev, Sirojiddin and Kim, Seung-Sik and Choi, Kwonhue and Choi, Gyu Sang},
title = {Mitigating {ARP} Poisoning-Based {Man-in-the-Middle} Attacks in Wired or Wireless {LAN}},
journaltitle = {EURASIP Journal on Wireless Communications and Networking},
volume = {2012},
number = {1},
eid = {89},
date = {2012},
doi = {10.1186/1687-1499-2012-89},
url = {https://doi.org/10.1186/1687-1499-2012-89}
volume = {2012},
number = {1},
eid = {89},
date = {2012},
doi = {10.1186/1687-1499-2012-89},
url = {https://doi.org/10.1186/1687-1499-2012-89}
}
@inproceedings{zhang2007portmirroring,
author = {Zhang, Jian and Moore, Andrew W.},
title = {Traffic Trace Artifacts due to Monitoring Via Port Mirroring},
author = {Zhang, Jian and Moore, Andrew W.},
title = {Traffic Trace Artifacts due to Monitoring Via Port Mirroring},
booktitle = {2007 Workshop on End-to-End Monitoring Techniques and Services},
series = {E2EMON '07},
pages = {1--8},
series = {E2EMON '07},
pages = {1--8},
publisher = {IEEE},
date = {2007},
doi = {10.1109/E2EMON.2007.375317},
url = {https://www.cl.cam.ac.uk/research/srg/netos/papers/2007-zhang2007traffic.pdf},
urldate = {2026-05-16}
date = {2007},
doi = {10.1109/E2EMON.2007.375317},
url = {https://www.cl.cam.ac.uk/research/srg/netos/papers/2007-zhang2007traffic.pdf},
urldate = {2026-05-16}
}
@inproceedings{durumeric2017httpsinterception,
author = {Durumeric, Zakir and Ma, Zane and Springall, Drew and Barnes, Richard and Sullivan, Nick and Bursztein, Elie and Bailey, Michael and Halderman, J. Alex and Paxson, Vern},
title = {The Security Impact of {HTTPS} Interception},
author = {Durumeric, Zakir and Ma, Zane and Springall, Drew and Barnes, Richard and Sullivan, Nick and Bursztein, Elie and Bailey, Michael and Halderman, J. Alex and Paxson, Vern},
title = {The Security Impact of {HTTPS} Interception},
booktitle = {Proceedings of the Network and Distributed System Security Symposium},
series = {NDSS '17},
date = {2017},
doi = {10.14722/ndss.2017.23456},
url = {https://doi.org/10.14722/ndss.2017.23456}
series = {NDSS '17},
date = {2017},
doi = {10.14722/ndss.2017.23456},
url = {https://doi.org/10.14722/ndss.2017.23456}
}
@inproceedings{waked2018tlsinterception,
author = {Waked, Louis and Mannan, Mohammad and Youssef, Amr},
title = {To Intercept or Not to Intercept: Analyzing {TLS} Interception in Network Appliances},
author = {Waked, Louis and Mannan, Mohammad and Youssef, Amr},
title = {To Intercept or Not to Intercept: Analyzing {TLS} Interception in Network Appliances},
booktitle = {Proceedings of the 2018 {ACM Asia} Conference on Computer and Communications Security},
series = {ASIACCS '18},
pages = {399--412},
series = {ASIACCS '18},
pages = {399--412},
publisher = {Association for Computing Machinery},
location = {Incheon, Republic of Korea},
date = {2018},
doi = {10.1145/3196494.3196528},
url = {https://doi.org/10.1145/3196494.3196528}
location = {Incheon, Republic of Korea},
date = {2018},
doi = {10.1145/3196494.3196528},
url = {https://doi.org/10.1145/3196494.3196528}
}
@article{decarnedecarnavalet2023tlsinterception,
author = {de Carn{\'e} de Carnavalet, Xavier and van Oorschot, Paul C.},
title = {A Survey and Analysis of {TLS} Interception Mechanisms and Motivations},
author = {de Carn{\'e} de Carnavalet, Xavier and van Oorschot, Paul C.},
title = {A Survey and Analysis of {TLS} Interception Mechanisms and Motivations},
journaltitle = {ACM Computing Surveys},
volume = {55},
number = {13s},
articleno = {269},
pages = {1--40},
date = {2023},
doi = {10.1145/3580522},
url = {https://doi.org/10.1145/3580522}
volume = {55},
number = {13s},
articleno = {269},
pages = {1--40},
date = {2023},
doi = {10.1145/3580522},
url = {https://doi.org/10.1145/3580522}
}
@manual{ieee8021q2022,
author = {{IEEE}},
title = {{IEEE Standard for Local and Metropolitan Area Networks--Bridges and Bridged Networks}},
author = {{IEEE}},
title = {{IEEE Standard for Local and Metropolitan Area Networks--Bridges and Bridged Networks}},
organization = {IEEE},
type = {IEEE Std 802.1Q-2022},
date = {2022-12-22},
url = {https://standards.ieee.org/ieee/802.1Q/10323/},
urldate = {2026-05-16}
type = {IEEE Std 802.1Q-2022},
date = {2022-12-22},
url = {https://standards.ieee.org/ieee/802.1Q/10323/},
urldate = {2026-05-16}
}
@inproceedings{perlman1985spanningtree,
author = {Perlman, Radia},
title = {An Algorithm for Distributed Computation of a Spanningtree in an Extended {LAN}},
author = {Perlman, Radia},
title = {An Algorithm for Distributed Computation of a Spanningtree in an Extended {LAN}},
booktitle = {Proceedings of the Ninth Symposium on Data Communications},
series = {SIGCOMM '85},
pages = {44--53},
series = {SIGCOMM '85},
pages = {44--53},
publisher = {Association for Computing Machinery},
location = {Whistler Mountain, British Columbia, Canada},
date = {1985},
doi = {10.1145/319056.319004},
url = {https://doi.org/10.1145/319056.319004}
location = {Whistler Mountain, British Columbia, Canada},
date = {1985},
doi = {10.1145/319056.319004},
url = {https://doi.org/10.1145/319056.319004}
}
@online{linuxkernelnetworkingdocs,
author = {{The Linux Kernel Documentation Authors}},
title = {Networking --- The Linux Kernel documentation},
year = {2026},
url = {https://docs.kernel.org/networking/index.html},
author = {{The Linux Kernel Documentation Authors}},
title = {Networking --- The Linux Kernel documentation},
year = {2026},
url = {https://docs.kernel.org/networking/index.html},
urldate = {2026-04-18}
}
@online{linuxkernelskbuffdocs,
author = {{The Linux Kernel Documentation Authors}},
title = {struct sk\_buff --- The Linux Kernel documentation},
year = {2026},
url = {https://docs.kernel.org/networking/skbuff.html},
author = {{The Linux Kernel Documentation Authors}},
title = {struct sk\_buff --- The Linux Kernel documentation},
year = {2026},
url = {https://docs.kernel.org/networking/skbuff.html},
urldate = {2026-04-18}
}
@online{linuxkernelbridgedocs,
author = {{The Linux Kernel Documentation Authors}},
title = {Ethernet Bridging --- The Linux Kernel documentation},
year = {2026},
url = {https://docs.kernel.org/networking/bridge.html},
author = {{The Linux Kernel Documentation Authors}},
title = {Ethernet Bridging --- The Linux Kernel documentation},
year = {2026},
url = {https://docs.kernel.org/networking/bridge.html},
urldate = {2026-04-18}
}
@online{linuxkernelswitchdevdocs,
author = {{The Linux Kernel Documentation Authors}},
title = {Ethernet switch device driver model (switchdev) --- The Linux Kernel documentation},
year = {2026},
url = {https://www.kernel.org/doc/html/latest/networking/switchdev.html},
author = {{The Linux Kernel Documentation Authors}},
title = {Ethernet switch device driver model (switchdev) --- The Linux Kernel documentation},
year = {2026},
url = {https://www.kernel.org/doc/html/latest/networking/switchdev.html},
urldate = {2026-05-16}
}
@online{linuxkernelflowtabledocs,
author = {{The Linux Kernel Documentation Authors}},
title = {Netfilter's Flowtable Infrastructure --- The Linux Kernel documentation},
year = {2026},
url = {https://docs.kernel.org/networking/nf_flowtable.html},
author = {{The Linux Kernel Documentation Authors}},
title = {Netfilter's Flowtable Infrastructure --- The Linux Kernel documentation},
year = {2026},
url = {https://docs.kernel.org/networking/nf_flowtable.html},
urldate = {2026-05-15}
}
@online{linuxkernelscalingdocs,
author = {{The Linux Kernel Documentation Authors}},
title = {Scaling in the Linux Networking Stack --- The Linux Kernel documentation},
year = {2026},
url = {https://docs.kernel.org/networking/scaling.html},
author = {{The Linux Kernel Documentation Authors}},
title = {Scaling in the Linux Networking Stack --- The Linux Kernel documentation},
year = {2026},
url = {https://docs.kernel.org/networking/scaling.html},
urldate = {2026-05-15}
}
@online{linuxkerneltracepointsdocs,
author = {{The Linux Kernel Documentation Authors}},
title = {Using the Linux Kernel Tracepoints --- The Linux Kernel documentation},
year = {2026},
url = {https://www.kernel.org/doc/html/latest/trace/tracepoints.html},
author = {{The Linux Kernel Documentation Authors}},
title = {Using the Linux Kernel Tracepoints --- The Linux Kernel documentation},
year = {2026},
url = {https://www.kernel.org/doc/html/latest/trace/tracepoints.html},
urldate = {2026-05-16}
}
@online{man7packet,
author = {{Linux man-pages project}},
title = {packet(7) --- Linux manual page},
date = {2025-09-21},
url = {https://man7.org/linux/man-pages/man7/packet.7.html},
author = {{Linux man-pages project}},
title = {packet(7) --- Linux manual page},
date = {2025-09-21},
url = {https://man7.org/linux/man-pages/man7/packet.7.html},
urldate = {2026-05-16}
}
@online{man7tcbpf,
author = {{Linux man-pages project}},
title = {tc-bpf(8) --- Linux manual page},
date = {2025-08-08},
url = {https://man7.org/linux/man-pages/man8/tc-bpf.8.html},
author = {{Linux man-pages project}},
title = {tc-bpf(8) --- Linux manual page},
date = {2025-08-08},
url = {https://man7.org/linux/man-pages/man8/tc-bpf.8.html},
urldate = {2026-05-16}
}
@online{man7bridge,
author = {{Linux man-pages project}},
title = {bridge(8) --- Linux manual page},
date = {2012-08-01},
url = {https://man7.org/linux/man-pages/man8/bridge.8.html},
author = {{Linux man-pages project}},
title = {bridge(8) --- Linux manual page},
date = {2012-08-01},
url = {https://man7.org/linux/man-pages/man8/bridge.8.html},
urldate = {2026-05-16}
}
@online{man7iplink,
author = {{Linux man-pages project}},
title = {ip-link(8) --- Linux manual page},
date = {2012-12-13},
url = {https://man7.org/linux/man-pages/man8/ip-link.8.html},
author = {{Linux man-pages project}},
title = {ip-link(8) --- Linux manual page},
date = {2012-12-13},
url = {https://man7.org/linux/man-pages/man8/ip-link.8.html},
urldate = {2026-05-16}
}
@online{nftableshooks,
author = {{The nftables Project}},
title = {Netfilter Hooks},
year = {2023},
url = {https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks},
author = {{The nftables Project}},
title = {Netfilter Hooks},
year = {2023},
url = {https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks},
urldate = {2026-05-15}
}
@online{nftablesbridgefiltering,
author = {{The nftables Project}},
title = {Bridge Filtering},
year = {2021},
url = {https://wiki.nftables.org/wiki-nftables/index.php/Bridge_filtering},
author = {{The nftables Project}},
title = {Bridge Filtering},
year = {2021},
url = {https://wiki.nftables.org/wiki-nftables/index.php/Bridge_filtering},
urldate = {2026-05-15}
}
@online{nftables_manpage,
title = {nft(8) -- Administration Tool of the nftables Framework
for Packet Filtering and Classification},
author = {{The Netfilter Project}},
organization = {The Netfilter Project},
year = {2026},
url = {https://netfilter.org/projects/nftables/manpage.html},
note = {Accessed: 2026-08-08}
}