Linux 2.6 内核下劫持系统调用，代码比较简单，还是可以参考参考的。,Linux 2.6 kernel system call hijacking, the code is relatively simple, or can refer to as a reference.

利用linux下的netfilter,在内核中注册一个勾子，完成ip，mac列表的绑定功能。-Linux netfilter in the kernel registered a hook to complete the binding function of ip, mac list.