My favorites | Sign in
Project Home
READ-ONLY: This project has been archived. For more information see this post.
Search
for
  Advanced search   Search tips   Subscriptions
Issue 7: how to change PCapFilePacket ?
1 person starred this issue and may be notified of changes. Back to list
Status:  Accepted
Owner:  cn.wei.hp@gmail.com


 
Project Member Reported by cn.wei.hp@gmail.com, Nov 14, 2010
class PCapFileHeader(structure.Structure):
    structure = (
        ('magic', '"\xd4\xc3\xb2\xa1'),
        ('versionMajor', '<H=2'),
        ('versionMinor', '<H=4'),
        ('GMT2localCorrection', '<l=0'),
        ('timeAccuracy', '<L=0'),
        ('maxLength', '<L=0xffff'),
        ('linkType', '<L=1'),
        ('packets','*:=[]'),
    )

class PCapFilePacket(structure.Structure):
    structure = (
        ('tsec', '<L=0'),
        ('tmsec', '<L=0'),
        ('savedLength', '<L-data'),
        ('realLength', '<L-data'),
        ('data',':'),
    )

Nov 14, 2010
Project Member #1 cn.wei.hp@gmail.com
f_in = open(sys.argv[1],'rb')
f_out = open(sys.argv[2],'wb')

pkt = PCapFilePacket()
pkt.fromString(f_in.read(len(pkt)))
pkt['data'] = f_in.read(pkt['savedLength'])
pkt_out = PCapFilePacket()
pkt_out['data'] = str(eth.get_packet())
f_out.write(str(pkt_out))
Nov 15, 2010
Project Member #3 cn.wei.hp@gmail.com
pcap修改的问题:

caplen  删除每条包尾部冗余数据

iplen   错误解码器不能正常解码

Powered by Google Project Hosting