non-critical impact:

raw sockets - undocumented (NcWn108)

Problem description

Raw sockets are used to bypass the transport layer, TCP and UDP, and are used to capture raw IP packets. Raw sockets implementations are limited in use. Support for raw sockets is not documented in HP-UX.

The following applications sniff or monitor the raw network:

• Network load monitors

• Routing utilities (for example, traceroute, ping, arp, routing daemons, multicast routing daemons, router discovery daemons)

• Network diagnostics tools to verify the network setup or report ARP messages sent from hosts (for example, ping)

• Internet security tools that reconstruct end-to-end sessions and monitor network connections

Identifiers

SOCK_RAW

Old behavior

The following is an example of a raw socket call:

sockd = socket(AF_INET, SOCK_RAW, protocol);

See also

• Background information on networking impacts
• socket(2)
• ip(7)

Solution description

HP-UX has an unsupported raw socket definition SOCK_RAW in </usr/include/sys/socket.h>. The user ID must be superuser. Documented support for raw sockets will be in a future version of HP-UX.

HP-UX does not support routing sockets. A routing socket is a special type of socket that is created with the following call:

socket(AF_ROUTE, SOCK_RAW, 0);

This type of socket is not specific to any particular network protocol, but allows privileged user processes to write information into the kernel.

See also

• socket(2)

Problem summary