Anonymous Monk has asked for the wisdom of the Perl Monks concerning the following question:
I am pretty new on the block. I have a log file from WireShark that I am trying the process and extract some information, namely src, dst and data.
see below a snipet of the log file:
For each src and dst, the data below has to be packed and send over a TCP/IP connection. Can any monk show me how to pack all the data into one string? I have already establiched the socket related frame work.Frame 76 (113 bytes on wire, 113 bytes captured) Ethernet II, Src: Intel_83:fb:e0 (00:0c:f1:83:fb:e0), Dst: HewlettP_c6 +:9e:c9 (00:14:c2:c6:9e:c9) Internet Protocol, Src: 201.20.2.1 (201.20.2.1), Dst: 201.20.2.2 (201. +20.2.2) Transmission Control Protocol, Src Port: apc-3052 (3052), Dst Port: ts +dos390 (1237), Seq: 1, Ack: 462008081, Len: 59 Source port: apc-3052 (3052) Destination port: tsdos390 (1237) Sequence number: 1 (relative sequence number) [Next sequence number: 60 (relative sequence number)] Acknowledgement number: 462008081 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size: 65535 Checksum: 0x9681 [incorrect, should be 0x8704 (maybe caused by "TC +P checksum offload"?)] Data (59 bytes) 0000 00 00 00 37 00 00 2f 0d 00 00 c0 06 00 00 00 27 ...7../....... +.' 0010 43 3a 5c 4d 4b 53 5c 75 74 72 61 5f 52 65 6c 65 C:\MKS\utra_Re +le 0020 61 73 65 34 2e 30 5c 55 74 72 61 5c 75 68 74 5c ase4.0\Utra\uh +t\ 0030 75 65 75 68 74 2e 63 00 00 00 b0 ueuht.c.... Data: 0000003700002F0D0000C00600000027433A5C4D4B535C75...
Thanks
|
|---|
| Replies are listed 'Best First'. | |
|---|---|
|
Re: Extracting data from a WireShark log
by GrandFather (Saint) on Apr 28, 2008 at 21:37 UTC | |
|
Re: Extracting data from a WireShark log
by pc88mxer (Vicar) on Apr 28, 2008 at 21:28 UTC | |
by Narveson (Chaplain) on Apr 29, 2008 at 18:13 UTC | |
|
Re: Extracting data from a WireShark log
by wade (Pilgrim) on Apr 28, 2008 at 21:43 UTC |