Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How can i obtain ip.src in human readable form? #7

Closed
GoogleCodeExporter opened this issue May 5, 2015 · 7 comments
Closed

How can i obtain ip.src in human readable form? #7

GoogleCodeExporter opened this issue May 5, 2015 · 7 comments

Comments

@GoogleCodeExporter
Copy link

What steps will reproduce the problem?
Following code:
import pcap, dpkt

def pr(hdr,data):
    print(`dpkt.ip.IP(data[14:])['src']`)

pc = pcap.pcap(None,1500,False)
pc.setfilter('udp')

##pc = pcap.pcap()
##pc.setfilter('udp')
pc.dispatch(10,pr)

shows mystery 'R\xb3A\x1e'
how to decode this?


Original issue reported on code.google.com by Dodin.Ro...@gmail.com on 21 Apr 2008 at 1:43

@GoogleCodeExporter
Copy link
Author

there's a dpkt.hexdump() that is pretty good in that it will basically show you 
a
sniffer view.  Otherwise it helps to open the packet in a sniffer like
wireshark/tcpdump/snoop/old ethereal that can decode the packet for you  and 
tell you
what each byte means (cause that's what you're dealing with sometimes).  Or 
I've seen
some other code that makes its own pcap handler that does something with
packets...maybe try that? Also it appears that the dpkt lib uses .unpack() to 
parse
packets out.  Try data = IP.unpack(), get data into UDP(), then UDP.unpack()? 

Original comment by don.mi...@gmail.com on 23 Apr 2008 at 11:44

@GoogleCodeExporter
Copy link
Author

i still cant access to IP source address, can you show me  a little code 
snippet?

all source w/o comments-damn

Original comment by Dodin.Ro...@gmail.com on 24 Apr 2008 at 7:43

@GoogleCodeExporter
Copy link
Author

Dodin,

You can simply use socket's ntoa function:

print socket.inet_ntoa(ip.src)

Or if you're already using dnet as well:

print dnet.ip_ntoa(ip.src)

Regards,
Jon Oberheide

Original comment by jon.ober...@gmail.com on 24 Apr 2008 at 8:01

  • Changed state: WontFix

@GoogleCodeExporter
Copy link
Author

ok, thanx

Original comment by Dodin.Ro...@gmail.com on 25 Apr 2008 at 8:21

@GoogleCodeExporter
Copy link
Author

ok, thanx

Original comment by Dodin.Ro...@gmail.com on 25 Apr 2008 at 8:22

@GoogleCodeExporter
Copy link
Author

Dodin,

I like being able to read the IP addresses in human readable form too.
fHere is a patch to ip.py to print the "src" and "dst" fields in human 
readable form.  Nom if you have a packet instance you can just do
repr(packet) to display the packet with human readable ip src/dst fields.

Have a nice day, 

# Aaron

Original comment by alrho...@gmail.com on 3 Oct 2009 at 2:39

Attachments:

@GoogleCodeExporter
Copy link
Author

use socket inetb notation
src=socket.inet_nota(ip.src)
 thats all

u ll get a ans

Original comment by aravindm...@gmail.com on 21 Jul 2014 at 9:51

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant