Jump to content
Sign in to follow this  

winpcap, read packet data

Recommended Posts



I have problem with parsing packet data using BinaryToString function. Im tryin capture only rtmp links from packet data using _PcapGetPacket($pcap). From reference (http://opensource.grisambre.net/pcapau3/) function return array and third element is a packet data in binary format. When I use BinaryToString there is nothing on output. Did I do something wrong? I would like convert packet to string and do some regex latter (see HttpCapture function) but I cannot get packet data in string.

#include <Array.au3> 
#include <Winpcap.au3> 

$winpcap=_PcapSetup() ; initialize winpcap 
$pcap_devices=_PcapGetDeviceList() ; get devices list 
$pcap=_PcapStartCapture($pcap_devices[1][0],"tcp port 1935",1)
    If IsArray($packet) Then 
Until $packet=-2 ; EOF
_PcapFree() ; close winpcap

Func HttpCapture($data) 
    $links = StringRegExp($data, 'rtmp://(.*?)_definst_', 2)

Share this post

Link to post
Share on other sites

Try the loop like this to see what you are actually getting:

While 1
    If $packet=-2 Then 
        ExitLoop ; EOF
    ElseIf IsArray($packet) Then 
        ConsoleWrite("$packet[3] = " & $packet[3] & @LF)
        ConsoleWrite(BinaryToString($packet[3]) & @LF & @LF)

Also, BinaryToString() assumes ANSI unless you tell it otherwise. See help file.


Valuater's AutoIt 1-2-3, Class... Is now in Session!For those who want somebody to write the script for them: RentACoder"Any technology distinguishable from magic is insufficiently advanced." -- Geek's corollary to Clarke's law

Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  


Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.