Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.python > #41702

Faking TCP Sessions with Scapy

Path csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!us.feeder.erje.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.freenet.ag!news2.euro.net!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path <jmellander@lbl.gov>
X-Original-To python-list@python.org
Delivered-To python-list@mail.python.org
X-Spam-Status OK 0.024
X-Spam-Evidence '*H*': 0.95; '*S*': 0.00; 'craft': 0.09; 'advance': 0.10; 'apache': 0.13; 'library': 0.15; 'obviously,': 0.16; 'byte': 0.17; "shouldn't": 0.17; '(or': 0.18; 'all:': 0.22; '(which': 0.26; '(we': 0.27; 'message-id:@mail.gmail.com': 0.27; 'actual': 0.28; 'served': 0.29; 'could': 0.32; 'info': 0.32; 'received:gov': 0.33; 'to:addr:python-list': 0.33; 'received:google.com': 0.34; 'text': 0.34; 'thanks': 0.34; 'feed': 0.35; 'received:209.85': 0.35; 'there': 0.35; 'created': 0.36; 'subject:with': 0.36; 'received:209': 0.37; 'page': 0.38; 'to:addr:python.org': 0.39; 'header:Received:5': 0.40; 'reasons,': 0.65
X-Ironport-SBRS 4.4
X-IronPort-Anti-Spam-Filtered true
X-IronPort-Anti-Spam-Result AoICANHWTFHRVYDGkGdsb2JhbABDh2msIAGTNwgWDgEBAQEJCRQUKINKXRIBBQGISaEpgnKeDo8vgyoDiHeNbY8iFimETRw
X-IronPort-AV E=Sophos;i="4.84,895,1355126400"; d="scan'208";a="12641945"
X-Google-DKIM-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:mime-version:x-received:date:message-id:subject:from:to :content-type:x-gm-message-state; bh=NPcDg92b3vujYeuNQQO5cHXPxl/YBX7992V91AutqD0=; b=RbUl88Jbjamwoig+kPd89fNkY/KecYcKw+oInV8zKmK9dVrwzZSXsqMmQ1pzNks9Nm z6IPxh/ugGd/KsuB8b0jfujEz/HB19GwLeNu080hOd7+xMmFhCGexPcC7JeY/pTm75QU Ximcs3X1ZiAU8fDd/zwExHApbZ2IgG0KT6dHlGg4sgnB0p2HhWqHdPsi9jRed4bCsm0B JhwT9ShKcM2mR8ov8FXGVsdFUEI8poqFPdhxgvHzivV+PEd0PfIuR6FotY3U2p2cJ1Ez YYFJRInQ5U6quvOoWAB3Ra3uDJKIhRWtA0chCbqdZ57NNiu+lAmMg0+6swQ8qrrxcnHy msWQ==
X-Received by 10.52.20.177 with SMTP id o17mr3981949vde.17.1363990286975; Fri, 22 Mar 2013 15:11:26 -0700 (PDT)
MIME-Version 1.0
X-Received by 10.52.20.177 with SMTP id o17mr3981946vde.17.1363990286911; Fri, 22 Mar 2013 15:11:26 -0700 (PDT)
Date Fri, 22 Mar 2013 15:11:26 -0700
Subject Faking TCP Sessions with Scapy
From Jim Mellander <jmellander@lbl.gov>
To python-list@python.org
Content-Type text/plain; charset=ISO-8859-1
X-Gm-Message-State ALoCoQmRkSJdoxBBi6etOZ8vrulRQaKXH9J2C9eGPLJK6F87/71lR0xVM3Us3GzZOW8ctBb+JFCdyAyNf8c8ZBruMuCQbqNWaLfzr+z9G8Cyt4HuAzOPe0rgHsMs89ZM7Nmnu1xLmUJHcitbY+7YCPtY7Kyrxk8twg==
X-BeenThere python-list@python.org
X-Mailman-Version 2.1.15
Precedence list
List-Id General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe <http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive <http://mail.python.org/pipermail/python-list/>
List-Post <mailto:python-list@python.org>
List-Help <mailto:python-list-request@python.org?subject=help>
List-Subscribe <http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups comp.lang.python
Message-ID <mailman.3616.1363990360.2939.python-list@python.org> (permalink)
Lines 12
NNTP-Posting-Host 2001:888:2000:d::a6
X-Trace 1363990360 news.xs4all.nl 6930 [2001:888:2000:d::a6]:58107
X-Complaints-To abuse@xs4all.nl
Xref csiph.com comp.lang.python:41702

Show key headers only | View raw


Hi all:

For various reasons, I want to take apache logs, and create actual
pcap packets that could plausibly have created those logs.  Obviously,
a lot of the info would need to be faked, such as the actual page
contents that were served (we have a byte count), the ports, and a few
other details.  Is there a library built on top of scapy (or other
pcap library) that can generate both parts of this transaction, if I
feed in the text to encapsulate?  Or am I going to need to craft each
packet individually (which shouldn't be a big deal anyway, really)?

Thanks in advance

Back to comp.lang.python | Previous | Next | Find similar | Unroll thread


Thread

Faking TCP Sessions with Scapy Jim Mellander <jmellander@lbl.gov> - 2013-03-22 15:11 -0700

csiph-web