hello, can you show your output from a tcp packet?

this is what I get after adding NetPacket::UDP which was missing from your code posted, but assuming it was there in you actual code, as I get error without it.

BTW, Thanks for this post, I learned a lot from it


packet: len=170, caplen=170, tv_sec=1273023698, tv_usec=716581
IP:TCP 32.96.130.64:22 -> 10.10.0.51:8761 (ack,psh)
  0x0000 : CD B1 79 B3 46 37 28 19 71 6C 2C FB 61 FB CE B7 : ..y.F7(.q
+l,.a...
  0x0010 : 44 70 10 69 32 F7 C0 FF 7F 25 FA 75 53 44 F6 FC : Dp.i2....
+%.uSD..
  0x0020 : 13 FF F2 E1 A9 20 72 20 8A EB 25 A7 76 89 67 A3 : ......r..
+.%.v.g.
  0x0030 : 28 65 F0 EA EF 02 A0 E3 BE F6 91 B1 AF 27 15 A2 : (e.......
+....'..
  0x0040 : ED 64 57 6B E6 16 34 F9 22 CA AA C4 73 89 F5 1F : .dWk..4."
+...s...
  0x0050 : 0F 8C 9C DD 5B 90 7B C7 29 0C 32 4C 3C 16 5B 90 : ....[.{.)
+.2L<.[.
  0x0060 : 7F 76 8B 6E 18 74 7C 48 E6 93 DE 58 C2 DC 5F 76 : .v.n.t|H.
+..X.._v
  0x0070 : ED BD CC 3D                                     : ...=

[download]
packet: len=231, caplen=231, tv_sec=1273023856, tv_usec=195874
IP:TCP 10.10.0.180:631 -> 10.10.0.255:631 ()
  0x0000 : 62 30 31 65 20 33 20 69 70 70 3A 2F 2F 31 30 2E : b01e.3.ip
+p://10.
  0x0010 : 31 30 2E 30 2E 31 38 30 3A 36 33 31 2F 70 72 69 : 10.0.180:
+631/pri
  0x0020 : 6E 74 65 72 73 2F 4F 66 66 69 63 65 4A 65 74 2D : nters/Off
+iceJet-
  0x0030 : 50 72 6F 2D 4B 38 35 30 20 22 22 20 22 4F 66 66 : Pro-K850.
+""."Off
  0x0040 : 69 63 65 4A 65 74 2D 50 72 6F 2D 4B 38 35 30 22 : iceJet-Pr
+o-K850"
  0x0050 : 20 22 48 50 20 4F 66 66 69 63 65 4A 65 74 20 50 : ."HP.Offi
+ceJet.P
  0x0060 : 72 6F 20 4B 38 35 30 20 46 6F 6F 6D 61 74 69 63 : ro.K850.F
+oomatic
  0x0070 : 2F 68 70 69 6A 73 20 28 72 65 63 6F 6D 6D 65 6E : /hpijs.(r
+ecommen
  0x0080 : 64 65 64 29 20 2D 20 48 50 4C 49 50 20 31 2E 36 : ded).-.HP
+LIP.1.6
  0x0090 : 2E 31 30 22 20 6A 6F 62 2D 73 68 65 65 74 73 3D : .10".job-
+sheets=
  0x00A0 : 6E 6F 6E 65 2C 6E 6F 6E 65 20 6C 65 61 73 65 2D : none,none
+.lease-
  0x00B0 : 64 75 72 61 74 69 6F 6E 3D 33 30 30 0A          : duration=
+300.

[download]

In reply to Re: how to Decode Hexdata got from Pcap by gman
in thread how to Decode Hexdata got from Pcap by Kanishka.black0

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.