Ars Packet Description. A string representation for TCP/IP packets used by hping3 that tries to be easy enough to be written
and read by humans, but at the same time not too complex to be parsed by computers.
This is an example of APD packet representation:
ip(ihl=0x5,ver=0x4,tos=0x00,totlen=52,id=28880,fragoff=0,mf=0,df=1,rf=0,ttl=64,proto=6,cksum=0x5bbe,saddr=192.168.1.6,daddr=213.28.116.205)+tcp(sport=32857,dport=6667,seq=1804471615,ack=3634589598,x2=0x0,off=8,flags=a,win=62694,cksum=0xda46,urp=0)+tcp.nop()+tcp.nop()+tcp.timestamp(val=54111314,ecr=1049055856)
See Parsing APD fields for information on how to get and set fields values in hping3 scripts.
|