Re: Xor decode from pcap file

Maybe something like this:

>perl -wMstrict -le
"my $binary = pack 'H*', '03762cefa7ffe5';
 printf '%02x ', $_ for unpack 'C*', $binary;  print '';
 ;;
 my ($p, $q) = unpack 'xCC', $binary;
 my $pairs   = (length($binary) - 3) / 2;
 my $k       = pack 'C*', 0, 0, 0, ($p, $q) x $pairs;
 printf '%02x ', $_ for unpack 'C*', $k;  print '';
 ;;
 my $decode = $binary ^ $k;
 printf '%02x ', $_ for unpack 'C*', $decode;
"
03 76 2c ef a7 ff e5
00 00 00 76 2c 76 2c
03 76 2c 99 8b 89 c9
[download]

Comment on Re: Xor decode from pcap file Download Code

Replies are listed 'Best First'.
Re^2: Xor decode from pcap file by mabossert (Scribe) on Jun 18, 2011 at 18:55 UTC
Sweet! That seems to have done the trick...Thank you so much. I have a huge headache from banging my head on the wall trying to figure out how to accomplish this. Now all I have to do is figure out what the heck the decoded data means...Thanks again!!!!	[reply]
Re^3: Xor decode from pcap file by Anonymous Monk on Jul 12, 2012 at 18:48 UTC
Would you mind posting the completed code?	[reply]
Re^4: Xor decode from pcap file by mabossert (Scribe) on Sep 26, 2012 at 13:55 UTC
my apologies...I didn't notice the request to post the completed code. Unfortunately, I moved to a new job and no longer have access to the code...sorry.	[reply]