0

我正在尝试将由 scapy 形成的网络数据包转发到其余服务,但不知何故数据包在接收方(其余服务方)损坏。

我使用 scapy 形成了网络数据包:

0000  1a 0b 0c 14 05 16 00 00 00 00 00 00 08 00 45 00   ..............E.
0010  01 10 00 01 00 00 40 11 f0 d2 05 05 05 04 7f 00   ......@.........
0020  00 01 00 44 00 43 00 fc 85 7f 01 00 00 00 00 00   ...D.C..........
0030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0070  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00a0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00b0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00c0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00d0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00e0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00f0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0100  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0110  00 00 00 00 00 00 63 82 53 63 35 01 01 ff         ......c.Sc5...

我使用 python 代码将捕获的 scapy 数据包转发到 Web 服务:

h = httplib2.Http(".cache")
h.add_credentials("user","passworkd")
data = urllib.urlencode({"packet":pack})
resp, content = h.request(url, "POST", data, headers={'Content-Type': 'applicatoin/x-www-form-urlencodede'})

在服务器端(用 java 实现)我打印了获得的数据包(字节流),它显示以下输出(与发送数据包不同):

1a0b0c140516000000000000080045000110000100004011efbfbdefbfbd050505047f0000010044004300efbfbd7f010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063efbfbd5363350101efbfbd

编辑:

Java服务器端处理:

@Path("/test")
    @POST
    @StatusCodes({
        @ResponseCode(code = 200, condition = "Destination reachable"),
        @ResponseCode(code = 503, condition = "Internal error"),
        @ResponseCode(code = 503, condition = "Destination unreachable") })
    public Response rcvDHCPPkt(@FormParam("packet") String packet) {

        String pkt_decode = URLDecoder.decode(packet, "UTF-8"); // tried with and without it.

        // here it shows the packet corruption. I tried to print packet also it has same problem.
        System.out.println("packet received:" + byteArrayToHex(packet_decode.getBytes()));

使用以下函数打印十六进制等效项。

   public static String byteArrayToHex(byte[] a) {
               StringBuilder sb = new StringBuilder(a.length * 2);
               for(byte b: a)
                  sb.append(String.format("%02x", b & 0xff));
               return sb.toString();
            }

如果我遗漏了什么,请建议我。我怀疑两个问题 urlencoding 或网络字节排序。

4

1 回答 1

0

我不认为这是一个 url 编码问题,至少在 Python 端不是。在这里,我将数据包发送到nc在我的本地机器上运行的服务器。Python代码是:

import urllib
import httplib2
from binascii import unhexlify

data = '1a0b0c140516000000000000080045000110000100004011f0d2050505047f0000010044004300fc857f010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063825363350101ff'

h = httplib2.Http(".cache")
h.add_credentials("user", "passworkd")
data = urllib.urlencode({"packet": unhexlify(data)})
resp, content = h.request('http://localhost:12345', "POST", data, headers={'Content-Type': 'applicatoin/x-www-form-urlencodede'})

以下是nc收到的内容:

$ nc -l localhost 12345
POST / HTTP/1.1
Host: localhost:12345
Content-Length: 851
content-type: applicatoin/x-www-form-urlencodede
accept-encoding: gzip, deflate
user-agent: Python-httplib2/0.9 (gzip)

packet=%1A%0B%0C%14%05%16%00%00%00%00%00%00%08%00E%00%01%10%00%01%00%00%40%11%F0%D2%05%05%05%04%7F%00%00%01%00D%00C%00%FC%85%7F%01%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00c%82Sc5%01%01%FF

如果您urllib.unquote()在接收到的数据上运行nc,它会成功地与原始数据进行比较......所以,客户端没有编码问题。


我确实注意到您没有为 Content-Type 标头使用正确的 MIME 类型:

headers={'Content-Type': 'applicatoin/x-www-form-urlencodede'}

应该

headers = {'Content-Type': 'application/x-www-form-urlencoded'}

我的猜测是您的 Java 服务器由于无效的 Content-Type 标头而误解了数据包数据。

于 2014-08-08T11:54:51.763 回答