You did not define "does not work"

It does not return any RR's or the Question. It parses the UDP header. I have that with NetPacket::UDP.

I've got a more specific question that will probably get me started in the right direction. The transaction ID is the first two bytes in the payload. The following code should return the transaction ID, but I'm not doing it right

my $udp_packet = NetPacket::UDP->decode($A_raw_IP_Packet);
my $payload = $udp_obj->{data};
#unpack "v" might return the two-bytes as an integer?
my $transID = unpack(v, substr($payload,0,2);
print "there's a transID of $transID \n";
[download]

Running my script, I get

Theres a transid 14964. In a separate terminal, dig returns an ID 7751

You did not define "does not work"

It does not return any RR's or the Question. It parses the UDP header. I have that with NetPacket::UDP.

I've got a more specific question that will probably get me started in the right direction. The transaction ID is the first two bytes in the payload. The following code should return the transaction ID, but I'm not doing it right

my $udp_packet = NetPacket::UDP->decode($A_raw_IP_Packet);
my $payload = $udp_obj->{data};
#unpack "v" might return the two-bytes as an integer?
my $transID = unpack(v, substr($payload,0,2));
print "there's a transID of $transID \n";
[download]

Running my script, I get

Theres a transid 14964. In a separate terminal, dig returns an ID 7751

I figured the question about getting the ID from the UDP payload with everyone's help. My problem was the implementation of NetPacket::IP and then NetPacket::UDP. The following code gets the ID out of the DNS packet.

my $ip_obj = NetPacket::IP::strip($Raw_IP_Packet);
my $udp_obj = NetPacket::UDP->decode($ip_obj);
if ($udp_obj->{len}) {
 my $payload = $udp_obj->{data};
 my $transid1 = unpack('n', substr($payload,0,2));
 print "The transID is $transid1 \n";
 }
[download]

My big mistake was the first line was wrong. " ...NetPacket::IP->decode($Raw_IP_packet);" This doesn't get the packet set up right. As the documentation for NetPacket::IP says, it happily parses garbage.

Net::DNS::Packet works, but I didn't see the errors of my ways until I got the ID working. the following code works in my situation.

use Net::DNS::Packet;
use Data::Dumper;
use NetPacket::UDP;
use NetPacket::IP;

my $ip_obj = NetPacket::IP::strip($Raw_IP_Packet);
my $udp_obj = NetPacket::UDP->decode($ip_obj);
 if ($udp_obj->{len}) {
     my $payload2 = $udp_obj->{data};
     my $test = Net::DNS::Packet->new(\$payload2);
      if ($test) {
            my @answer = $test->answer;
            print Dumper(@answer);
         } else {
            print "no Net::DNS::Packet \n";}
           }

 }
[download]

I get a complete @answer back when doing "dig slashdot.org" in another terminal.

A big thank you to everyone who gave me a push in the right direction despite my vague question.

unpack "v"? Are you sure? Little-endian? For a network protocol?

It should definitely be 'n'. "When a multi-octet quantity is transmitted[,] the most significant octet is transmitted first."

unpack "v"? Are you sure? Little-endian? For a network protocol?

This is where I need some help.

    my $transid = unpack('n', substr($payload,0,2));
[download]

My script returns "Theres a transid 29754" and dig returns 43785 in a separate terminal.

As JavaFan has said that should be 'n', not 'v'. If IDs in script and terminal are different, then how do you know that you captured the right packet? Why do you assigning decoded UDP packet to $udp_packet variable, but getting $payload from $udp_obj? Are you using strict and warnings? Could you post packet data and actual script that we could run?

See also How do I post a question effectively?

Weird....

Are you sure you are using the methods correctly. Also. Does the header question count indicate there is a question section, same for the answer section?

e.g:

  my $packet = $res->send($data->{'name'}, $data->{'type'}, 'IN');
    
    ok($packet, "Got an answer for $data->{name} IN $data->{type}");
    is($packet->header->qdcount, 1, 'Only one question');
    is($packet->header->ancount, 1, 'Got single answer');
    
    my $question = ($packet->question)[0];
    my $answer   = ($packet->answer)[0];
[download]

If you did all those things. You could consider sending a bug report via https://rt.cpan.org/NoAuth/ReportBug.html?Queue=Net-DNS and make sure you include some sample packet data.

--Olaf (Net::DNS maintainer)