In computer networking, a raw socket is an internet socket that allows direct sending and receiving of raw network packets.
Contents |
In standard sockets, the payload to be transmitted is encapsulated according to the chosen transport layer protocol (e.g. TCP, UDP). In contrast, raw sockets usually receive raw packets including of the header. When transmitting packets, the automatic addition of a header may be a configurable option of the socket.
One possible use case for raw sockets is the implementation of new transport-layer protocols in user space.[1]
Raw sockets are typically available in network equipment, and used for routing protocols such as the Internet Group Management Protocol (IGMP) and Open Shortest Path First (OSPF), and in the Internet Control Message Protocol (ICMP, best known for the Ping suboperation).[2]
Most socket application programming interfaces (APIs), especially those based on Berkeley sockets, support raw sockets.
When Microsoft released Windows XP in 2001 with raw socket support implemented in the Winsock interface, the media criticized Microsoft asserting that raw sockets are only of use to hackers to perform TCP reset attacks. Three years after the Windows XP release, Microsoft silently limited Winsock's raw socket support in a non-removable hotfix and offered no further support or workarounds for applications that used them.[3]