You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
What steps will reproduce the problem?
1. Load up an off line pcap (I am using Core Security's Pcapy)
2. Instantiate a tcp packet object with dpkt.tcp.TCP(packet_data)
3. Print sport dport, and it is wrong
What is the expected output? What do you see instead?
In the packet capture data I had I was expecting the value to 2001, which
would have been the server port connecting too and from. The dsport is
also incorrect.
What version of the product are you using? On what operating system?
I am using the latest from the repository and the operating system is
linux.
Please provide any additional information below.
I tried to debug the issue, but I have not been able to identify the
problem as of yet.
Original issue reported on code.google.com by demonic....@gmail.com on 27 Jul 2007 at 9:41
Could you post the dump file you're processing (or an de-sensitized one that
reproduces what you're seeing)?
Also, you should take a look at the Reader class in dpkt's pcap.py. It
provides a
convenient interface for reading in pcap files.
Original comment by jon.ober...@gmail.com on 27 Jul 2007 at 10:14
...or I could just take a minute to read your posted code. ;-)
I've never used pcapy, but as it is a pcap library I'm assuming it hands you
the raw
packet from the pcap dump which includes the appropriate link and network
layers, not
just the transport layer (TCP).
So try the following:
for i in pcap_dumps[key]:
print `Ethernet(i[1])`
#packet_data[key].append(TCP(i[1]))
If the TCP port listed in the output looks correct, then that's your problem.
Original comment by jon.ober...@gmail.com on 27 Jul 2007 at 10:28
Original issue reported on code.google.com by
demonic....@gmail.com
on 27 Jul 2007 at 9:41Attachments:
The text was updated successfully, but these errors were encountered: