Hi Wrene

Congratulations! A python interface for winpcap is very useful.
Now, about the dot/period in google.com, can u check if it might be a bad
conversion ?
dot should be 101110 binary, and \x in C/C++ for hexacharacters, so \x03 is
000011.
I can't figure out any simmetry between both numbers.
But I can see some other strange conversions like \x16e , or www\google.
The padding seems ok, because both the len= and ulen= fields are correct for
a 64byte IP ethernet packet.

----- Original Message ----- 
From: "Wrene Robyn" <[EMAIL PROTECTED]>
To: <winpcap-users@winpcap.polito.it>
Sent: Tuesday, March 29, 2005 1:05 AM
Subject: [WinPcap-users] packet translation woe's


> Hi,
> I've implemented winpcap through python and am actually receiving
> packets:
>
> Ethernet(src='\x00\x0e5\x10R@', dst='\x00\x0ff2>\x84',
> data=IP(src='\xc0\xa8dd', dst='D\t\x10\x19', sum=8292, len=64, p=17,
> ttl=128, id=41242, data=UDP(dport=53, sum=2040, sport=1605, ulen=44,
> data='\x16e\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x03www\google\x03com
> \x00\x00\x01\x00\x01')))
>
> note captured via ethernet. So what is the \x format and how do I
> convert it to something legible?
>
> 3www\google\x03com <- 03 is not a hex value for a period
>
> this is driving me a bit nuts, note I an definitely NOT an expert on
> network, packets, etc. Just trying to create some legibility in python.
> Thanks for the help
>
>
>
> ==================================================================
>  This is the WinPcap users list. It is archived at
>  http://www.mail-archive.com/winpcap-users@winpcap.polito.it/
>
>  To unsubscribe use
>  mailto: [EMAIL PROTECTED]
> ==================================================================



==================================================================
 This is the WinPcap users list. It is archived at
 http://www.mail-archive.com/winpcap-users@winpcap.polito.it/

 To unsubscribe use 
 mailto: [EMAIL PROTECTED]
==================================================================

Reply via email to