topic Re: Hping does not log in General Topics

Hping does not log

Moudar — Tue, 19 Mar 2024 15:29:59 GMT

I need to simulate traffic from one device 10.2.2.10, when using Hping command:

hping -a 10.2.2.10 -S -I any -p 443 www.facebook.com

no logs show up !! I wonder why no logs show up ?

What I found is that any IP from 10.2.0.0/16 used in Hping does not generate logs!

If I run for example:

hping -a 10.2.12.10 -S -I any -p 443 www.facebook.com

I can see logs that shows dropped traffic because this IP is not allowed by any rule.

The device behind 10.2.2.10 generates logs normally, but when using Hping no logs show up!

running tcpdump at the same time when Hping is running on 10.2.2.10 shows traffic normally, but still no logs!

Any ideas!

The interface (where 10.2.0.0 goes) has anti-spoofing active

Re: Hping does not log

Timothy_Hall — Tue, 19 Mar 2024 18:11:27 GMT

Why are you specifying "-I any"? That is invalid interface syntax so by default hping will send the traffic to the loopback (lo) interface, which won't work and is why you aren't seeing logs. Assuming you have a valid route to the target IP address you don't need to specify a specific interface; try this instead taken from my 2024 CPX speech Be your Own TAC: Advanced Gateway Troubleshooting Commands:

hping -S --spoof 10.2.2.10 -p 443 www.facebook.com

Re: Hping does not log

the_rock — Wed, 20 Mar 2024 00:57:49 GMT

You definitely got the BEST explanation out there from Tim.

Andy