dpkt

Release [Link]

November 10, 2015

Contents

Getting Started
1.1 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.2 Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

3
3
3

API Reference
2.1 API Reference . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

7
7

About dpkt
3.1 Authors . . . . . .
3.2 Changelog . . . .
3.3 Development plans
3.4 Contributing . . .
3.5 License . . . . . .

.
.
.
.
.

69
69
70
70
70
71

Administration
4.1 Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

73
73

Python Module Index

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

.
.
.
.
.

75

ii

dpkt, Release [Link]

dpkt is a python module for fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols

Contents

dpkt, Release [Link]

Contents

CHAPTER 1

Getting Started

1.1 Installation
DKPT is now available directly from pypi :)

1.1.1 Install the Code

pip install dpkt

1.1.2 Checkout the Code

git clone [Link]

1.2 Examples
1.2.1 Examples in dpkt/examples
print_packets.py
Use DPKT to read in a pcap file and print out the contents of the packets This example is focused on the fields in the
Ethernet Frame and IP packet
examples.print_packets.mac_addr(mac_string)
Print out MAC address given a string
Parameters mac_string the string representation of a MAC address
Returns printable MAC address
examples.print_packets.ip_to_str(address)
Print out an IP address given a string
Parameters address the string representation of a MAC address
Returns printable IP address
examples.print_packets.print_packets(pcap)
Print out information about each packet in a pcap

dpkt, Release [Link]

Parameters pcap dpkt pcap reader object ([Link])

examples.print_packets.test()
Open up a test pcap file and print out the packets
Code Excerpt
# For each packet in the pcap process the contents
for timestamp, buf in pcap:
# Print out the timestamp in UTC
print 'Timestamp: ', str([Link](timestamp))
# Unpack the Ethernet frame (mac src/dst, ethertype)
eth = [Link](buf)
print 'Ethernet Frame: ', mac_addr([Link]), mac_addr([Link]), [Link]
# Make sure the Ethernet frame contains an IP packet
# EtherType (IP, ARP, PPPoE, IP6... see [Link]
if [Link] != [Link].ETH_TYPE_IP:
print 'Non IP Packet type not supported %s\n' % [Link].__class__.__name__
continue
# Now unpack the data within the Ethernet frame (the IP packet)
# Pulling out src, dst, length, fragment info, TTL, and Protocol
ip = [Link]
# Pull out fragment information (flags and offset all packed into off field, so use bitmasks)
do_not_fragment = bool([Link] & [Link].IP_DF)
more_fragments = bool([Link] & [Link].IP_MF)
fragment_offset = [Link] & [Link].IP_OFFMASK

# Print out the info

print 'IP: %s -> %s
(len=%d ttl=%d DF=%d MF=%d offset=%d)\n' % \
(ip_to_str([Link]), ip_to_str([Link]), [Link], [Link], do_not_fragment, more_fragments, fra

Example Output
Timestamp: 2004-05-13 [Link].311224
Ethernet Frame: [Link] [Link] 2048
IP: [Link] -> [Link]
(len=48 ttl=128 DF=1 MF=0 offset=0)
Timestamp: 2004-05-13 [Link].222534
Ethernet Frame: [Link] [Link] 2048
IP: [Link] -> [Link]
(len=48 ttl=47 DF=1 MF=0 offset=0)
...

1.2.2 Jon Oberheides Examples

[@jonoberheides]([Link] old examples still apply:
dpkt Tutorial #1: ICMP Echo
dpkt Tutorial #2: Parsing a PCAP File
dpkt Tutorial #3: dns spoofing
dpkt Tutorial #4: AS Paths from MRT/BGP

Chapter 1. Getting Started

dpkt, Release [Link]

1.2.3 Jeff Silverman Docs/Code

Jeff Silverman has some code and documentation.

1.2. Examples

dpkt, Release [Link]

Chapter 1. Getting Started

CHAPTER 2

API Reference

2.1 API Reference

The dpkt API reference section is currently a work in progress, please have patience as we fill in and improve the
documentation.
dpkt Modules

2.1.1 [Link] module

Authentication Header.
class [Link](*args, **kwargs)
Bases: [Link]
auth =
unpack(buf )
data
len
nxt
rsvd
seq
spi

2.1.2 [Link] module

AOL Instant Messenger.
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
ast
data
len

dpkt, Release [Link]

seq
type
class [Link](*args, **kwargs)
Bases: [Link]
data
family
flags
reqid
subtype
[Link](buf )

2.1.3 [Link] module

ATA over Ethernet Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
ver
fl
classmethod set_cmd(cmd, pktclass)
classmethod get_cmd(cmd)
unpack(buf )
pack_hdr()
cmd
data
err
maj
min
tag
ver_fl

2.1.4 [Link] module

ATA over Ethernet ATA command
class [Link](*args, **kwargs)
Bases: [Link]
aflags
cmdstat
data
errfeat
8

Chapter 2. API Reference

dpkt, Release [Link]

lba0
lba1
lba2
lba3
lba4
lba5
res
scnt
[Link].test_aoeata()

2.1.5 [Link] module

ATA over Ethernet ATA command
class [Link](*args, **kwargs)
Bases: [Link]
aoeccmd
bufcnt
cslen
data
fwver
scnt
[Link].test_aoecfg()

2.1.6 [Link] module

Address Resolution Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
data
hln
hrd
op
pln
pro
sha
spa
tha
tpa

2.1. API Reference

dpkt, Release [Link]

2.1.7 dpkt.asn1 module

Abstract Syntax Notation #1.
[Link](buf )
Convert ASN.1 UTCTime string to UTC float.
[Link](buf )
Sleazy ASN.1 decoder. Return list of (id, value) tuples from ASN.1 BER/DER encoded buffer.
dpkt.asn1.test_asn1()

2.1.8 [Link] module

Border Gateway Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
class Open(*args, **kwargs)
Bases: [Link]
unpack(buf )
class Parameter(*args, **kwargs)
Bases: [Link]
unpack(buf )
class Authentication(*args, **kwargs)
Bases: [Link]
code
data
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
code
data
len
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link].param_len
[Link].v

10

Chapter 2. API Reference

dpkt, Release [Link]

class [Link](*args, **kwargs)

Bases: [Link]
unpack(buf )
class Attribute(*args, **kwargs)
Bases: [Link]
optional
transitive
partial
extended_length
unpack(buf )
class Origin(*args, **kwargs)
Bases: [Link]
data
type
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
class ASPathSegment(*args, **kwargs)
Bases: [Link]
unpack(buf )
data
len
type
class [Link](*args, **kwargs)
Bases: [Link]
data
ip
class [Link](*args, **kwargs)
Bases: [Link]
data
value
class [Link](*args, **kwargs)
Bases: [Link]
data
value
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )

2.1. API Reference

11

dpkt, Release [Link]

class [Link](*args, **kwargs)

Bases: [Link]
asn
data
ip
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
class Community(*args, **kwargs)
Bases: [Link]
asn
data
value
class [Link](*args,
**kwargs)
Bases: [Link]
data
value
class [Link](*args, **kwargs)
Bases: [Link]
data
value
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
class SNPA
Bases: object
unpack(buf )
[Link]
[Link]
[Link]
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
afi
data
safi
12

Chapter 2. API Reference

dpkt, Release [Link]

[Link]
[Link]
[Link]
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
code
data
subcode
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
class [Link](*args, **kwargs)
Bases: [Link]
afi
data
rsvd
safi
[Link]
[Link]
[Link]
[Link]
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
len
class [Link].RouteIPV4(*args, **kwargs)
Bases: [Link]
unpack(buf )
data
len
class [Link].RouteIPV6(*args, **kwargs)
Bases: [Link]
unpack(buf )
data
len
[Link].test_pack()

2.1. API Reference

13

dpkt, Release [Link]

[Link].test_unpack()

2.1.9 [Link] module

Cisco Discovery Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
class Address(*args, **kwargs)
Bases: [Link]
unpack(buf )
alen
data
p
plen
ptype
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
len
type
[Link](buf )
[Link]
[Link]
[Link]
[Link]

2.1.10 dpkt.crc32c module

[Link](crc, buf )
[Link](crc)
[Link](buf )
Return computed CRC-32c checksum.

2.1.11 [Link] module

[Link].decorator_with_args(decorator_to_enhance)
This is decorator for decorator. It allows any decorator to get additional arguments
[Link](*args, **kwargs)

14

Chapter 2. API Reference

dpkt, Release [Link]

class [Link]
Bases: object
new_method()
old_method(*args, **kwargs)
deprecated_decorator(*args, **kwargs)
test_deprecated_decorator()

2.1.12 [Link] module

Dynamic Host Configuration Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
opts = ((53, \x01), (55, 2\x03\x01\x06))
pack_opts()
Return packed options string.
unpack(buf )
chaddr
ciaddr
data
file
flags
giaddr
hln
hops
hrd
magic
op
secs
siaddr
sname
xid
yiaddr
[Link].test_dhcp()

2.1.13 [Link] module

Diameter.
class [Link](*args, **kwargs)
Bases: [Link]

2.1. API Reference

15

dpkt, Release [Link]

request_flag
proxiable_flag
error_flag
retransmit_flag
unpack(buf )
pack_hdr()
app_id
cmd
data
end_id
flags
hop_id
len
v
class [Link](*args, **kwargs)
Bases: [Link]
vendor_flag
mandatory_flag
protected_flag
code
data
flags
len
unpack(buf )
pack_hdr()
[Link].test_pack()
[Link].test_unpack()

2.1.14 [Link] module

Domain Name System.
[Link].pack_name(name, off, label_ptrs)
[Link].unpack_name(buf, off )
class [Link](*args, **kwargs)
Bases: [Link]
qr
opcode
aa
16

Chapter 2. API Reference

dpkt, Release [Link]

rd
ra
zero
rcode
get_qr(*args, **kwargs)
set_qr(*args, **kwargs)
get_opcode(*args, **kwargs)
set_opcode(*args, **kwargs)
get_aa(*args, **kwargs)
set_aa(*args, **kwargs)
get_rd(*args, **kwargs)
set_rd(*args, **kwargs)
get_ra(*args, **kwargs)
set_ra(*args, **kwargs)
get_zero(*args, **kwargs)
set_zero(*args, **kwargs)
get_rcode(*args, **kwargs)
set_rcode(*args, **kwargs)
class Q(*args, **kwargs)
Bases: [Link]
DNS question.
unpack(buf )
cls
data
name
type
class [Link](*args, **kwargs)
Bases: [Link].Q
DNS resource record.
pack_rdata(off, label_ptrs)
unpack_rdata(buf, off )
cls
data
name
rdata
rlen
ttl

2.1. API Reference

17

dpkt, Release [Link]

type
DNS.pack_q(buf, q)
Append packed DNS question and return buf.
DNS.unpack_q(buf, off )
Return DNS question and new offset.
DNS.pack_rr(buf, rr)
Append packed DNS RR and return buf.
DNS.unpack_rr(buf, off )
Return DNS RR and new offset.
[Link](buf )
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link].test_basic()
[Link].test_PTR()
[Link].test_OPT()
[Link].test_pack_name()
[Link].test_deprecated_methods()
Test deprecated methods. Note: when they are removed so should this test
[Link].test_deprecated_method_performance()
Test the performance hit for the deprecation decorator

2.1.15 [Link] module

Simple packet creation and parsing.
exception [Link]
Bases: [Link]
exception [Link]
Bases: [Link]
exception [Link]
Bases: [Link]
exception [Link]
Bases: [Link]
class [Link](*args, **kwargs)
Bases: object
Base packet class, with metaclass magic to generate members from self.__hdr__.

18

Chapter 2. API Reference

dpkt, Release [Link]

__hdr__ should be defined as a list of (name, structfmt, default) tuples __byte_order__ can be set to override the
default (>)
Example:
>>> class Foo(Packet):

... __hdr__ = ((foo, I, 1), (bar, H, 2), (baz, 4s, quux)) ... >>> foo = Foo(bar=3) >>> foo Foo(bar=3)
>>> str(foo) quux >>> [Link] 3 >>> [Link] quux >>> [Link] = 7 >>> [Link] = whee >>> foo
Foo(baz=whee, foo=7, bar=3) >>> Foo(hello, world!) Foo(baz= wor, foo=1751477356L, bar=28460,
data=ld!)
pack_hdr()
Return packed header string.
pack()
Return packed header + [Link] string.
unpack(buf )
Unpack packet header fields from buf, and set [Link].
[Link](buf, length=16)
Return a hexdump output string of the given buffer.
[Link].in_cksum_add(s, buf )
[Link].in_cksum_done(s)
[Link].in_cksum(buf )
Return computed Internet checksum.

2.1.16 [Link] module

Dynamic Trunking Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
v

2.1.17 [Link] module

Encapsulated Security Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
data
seq
spi

2.1. API Reference

19

dpkt, Release [Link]

2.1.18 [Link] module

Ethernet II, LLC (802.3+802.2), LLC/SNAP, and Novell raw 802.3, with automatic 802.1q, MPLS, PPPoE, and Cisco
ISL decapsulation.
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
classmethod set_type(t, pktclass)
classmethod get_type(t)
data
dst
src
type
[Link].test_eth()

2.1.19 [Link] module

Generic Routing Encapsulation.
class [Link](*args, **kwargs)
Bases: [Link]
sre = ()
v
recur
get_v(*args, **kwargs)
set_v(*args, **kwargs)
get_recur(*args, **kwargs)
set_recur(*args, **kwargs)
class SRE(*args, **kwargs)
Bases: [Link]
unpack(buf )
data
family
len
off
GRE.opt_fields_fmts()
[Link](buf )
[Link]
[Link]
GRE.p

20

Chapter 2. API Reference

dpkt, Release [Link]

2.1.20 [Link] module

GNU zip.
class [Link](*args, **kwargs)
Bases: [Link]
data
id
len
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
pack_hdr()
compress()
Compress [Link].
decompress()
Return decompressed payload.
comment
data
extra
filename
flags
magic
method
mtime
os
xflags

2.1.21 dpkt.h225 module

ITU-T H.225.0 Call Signaling.
class dpkt.h225.H225(*args, **kwargs)
Bases: [Link]
unpack(buf )
class IE(*args, **kwargs)
Bases: [Link]
unpack(buf )
data
type
[Link]

2.1. API Reference

21

dpkt, Release [Link]

[Link]
H225.ref_len
dpkt.h225.test_pack()
dpkt.h225.test_unpack()

2.1.22 [Link] module

Cisco Hot Standby Router Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
auth
data
group
hello
hold
opcode
priority
rsvd
state
version
vip

2.1.23 [Link] module

Hypertext Transfer Protocol.
[Link].parse_headers(f )
Return dict of HTTP headers parsed from a file object.
[Link].parse_body(f, headers)
Return HTTP body parsed from a file object, given HTTP header dict.
class [Link](*args, **kwargs)
Bases: [Link]
Hypertext Transfer Protocol headers + body.
headers = None
body = None
unpack(buf, is_body_allowed=True)
pack_hdr()
class [Link](*args, **kwargs)
Bases: [Link]
Hypertext Transfer Protocol Request.

22

Chapter 2. API Reference

dpkt, Release [Link]

unpack(buf )
class [Link](*args, **kwargs)
Bases: [Link]
Hypertext Transfer Protocol Response.
unpack(buf )
[Link].test_parse_request()
[Link].test_format_request()
[Link].test_chunked_response()
[Link].test_multicookie_response()
[Link].test_noreason_response()
[Link].test_body_forbidden_response()
[Link].test_request_version()
[Link].test_invalid_header()

2.1.24 [Link] module

Internet Control Message Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
class Echo(*args, **kwargs)
Bases: [Link]
data
id
seq
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
pad
class [Link](*args, **kwargs)
Bases: [Link]
data
mtu
pad
class [Link](*args, **kwargs)
Bases: [Link]
data
pad

2.1. API Reference

23

dpkt, Release [Link]

class [Link](*args, **kwargs)

Bases: [Link]
data
gw
class [Link](*args, **kwargs)
Bases: [Link]
data
pad1
pad2
ptr
class [Link](*args, **kwargs)
Bases: [Link]
data
pad
[Link](buf )
[Link]
[Link]
[Link]
[Link]
[Link].test_icmp()

2.1.25 dpkt.icmp6 module

Internet Control Message Protocol for IPv6.
class dpkt.icmp6.ICMP6(*args, **kwargs)
Bases: [Link]
class Error(*args, **kwargs)
Bases: [Link]
unpack(buf )
data
pad
class [Link](*args, **kwargs)
Bases: [Link]
data
pad
class [Link](*args, **kwargs)
Bases: [Link]
data
mtu

24

Chapter 2. API Reference

dpkt, Release [Link]

class [Link](*args, **kwargs)

Bases: [Link]
data
pad
class [Link](*args, **kwargs)
Bases: [Link]
data
ptr
class [Link](*args, **kwargs)
Bases: [Link]
data
id
seq
[Link](buf )
[Link]
[Link]
[Link]
[Link]

2.1.26 dpkt.ieee80211 module

IEEE 802.11.
class dpkt.ieee80211.IEEE80211(*args, **kwargs)
Bases: [Link]
version
type
subtype
to_ds
from_ds
more_frag
retry
pwr_mgt
more_data
wep
order
unpack_ies(buf )
class Capability(field)
Bases: object
[Link](buf )
2.1. API Reference

25

dpkt, Release [Link]

class [Link](*args, **kwargs)

Bases: [Link]
ctl
data
dst
seq
src
class [Link](*args, **kwargs)
Bases: [Link]
compressed
ack_policy
multi_tid
tid
unpack(buf )
ctl
data
dst
seq
src
class [Link](*args, **kwargs)
Bases: [Link]
data
dst
src
class [Link](*args, **kwargs)
Bases: [Link]
data
dst
class [Link](*args, **kwargs)
Bases: [Link]
data
dst
class [Link](*args, **kwargs)
Bases: [Link]
data
dst
src

26

Chapter 2. API Reference

dpkt, Release [Link]

class IEEE80211.MGMT_Frame(*args, **kwargs)

Bases: [Link]
bssid
data
dst
frag_seq
src
class [Link](*args, **kwargs)
Bases: [Link]
capability
data
interval
timestamp
class [Link](*args, **kwargs)
Bases: [Link]
data
reason
class IEEE80211.Assoc_Req(*args, **kwargs)
Bases: [Link]
capability
data
interval
class IEEE80211.Assoc_Resp(*args, **kwargs)
Bases: [Link]
aid
capability
data
status
class IEEE80211.Reassoc_Req(*args, **kwargs)
Bases: [Link]
capability
current_ap
data
interval
class [Link](*args, **kwargs)
Bases: [Link]
algorithm
auth_seq

2.1. API Reference

27

dpkt, Release [Link]

data
class [Link](*args, **kwargs)
Bases: [Link]
data
reason
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
category
code
data
class [Link](*args, **kwargs)
Bases: [Link]
data
dialog
parameters
starting_seq
timeout
class [Link](*args, **kwargs)
Bases: [Link]
data
dialog
parameters
status_code
timeout
class [Link](*args, **kwargs)
Bases: [Link]
bssid
data
dst
frag_seq
src
class [Link](*args, **kwargs)
Bases: [Link]
bssid
data
dst
frag_seq

28

Chapter 2. API Reference

dpkt, Release [Link]

src
class [Link](*args, **kwargs)
Bases: [Link]
bssid
data
dst
frag_seq
src
class [Link](*args, **kwargs)
Bases: [Link]
da
data
dst
frag_seq
sa
src
class IEEE80211.QoS_Data(*args, **kwargs)
Bases: [Link]
control
data
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
id
len
class [Link](*args, **kwargs)
Bases: [Link]
data
hopindex
hoppattern
hopset
id
len
tu
class [Link](*args, **kwargs)
Bases: [Link]
ch

2.1. API Reference

29

dpkt, Release [Link]

data
id
len
class [Link](*args, **kwargs)
Bases: [Link]
count
data
dur
id
len
max
period
[Link]
[Link]
[Link]
class [Link](*args, **kwargs)
Bases: [Link]
count
ctrl
data
id
len
period
unpack(buf )
class [Link](*args, **kwargs)
Bases: [Link]
atim
data
id
len
dpkt.ieee80211.test_802211_ack()
dpkt.ieee80211.test_80211_beacon()
dpkt.ieee80211.test_80211_data()
dpkt.ieee80211.test_80211_data_qos()
dpkt.ieee80211.test_bug()
dpkt.ieee80211.test_data_ds()
dpkt.ieee80211.test_compressed_block_ack()

30

Chapter 2. API Reference

dpkt, Release [Link]

dpkt.ieee80211.test_action_block_ack_request()
dpkt.ieee80211.test_action_block_ack_response()

2.1.27 [Link] module

Internet Group Management Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
data
group
maxresp
sum
type

2.1.28 [Link] module

Internet Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
opts =
len
v
hl
rf
df
mf
offset
unpack(buf )
classmethod set_proto(p, pktclass)
classmethod get_proto(p)
data
dst
id
off
p
src
sum
tos

2.1. API Reference

31

dpkt, Release [Link]

ttl
[Link].test_ip()
[Link].test_hl()
[Link].test_opt()
[Link].test_zerolen()
[Link].test_constuctor()
[Link].test_frag()

2.1.29 dpkt.ip6 module

Internet Protocol, version 6.
class dpkt.ip6.IP6(*args, **kwargs)
Bases: [Link]
v
fc
flow
unpack(buf )
headers_str()
Output extension headers in order defined in RFC1883 (except dest opts)
classmethod set_proto(p, pktclass)
classmethod get_proto(p)
data
dst
hlim
nxt
plen
src
class dpkt.ip6.IP6ExtensionHeader(*args, **kwargs)
Bases: [Link]
An extension header is very similar to a sub-packet. We just want to re-use all the hdr unpacking etc.
class dpkt.ip6.IP6OptsHeader(*args, **kwargs)
Bases: dpkt.ip6.IP6ExtensionHeader
unpack(buf )
data
len
nxt
class dpkt.ip6.IP6HopOptsHeader(*args, **kwargs)
Bases: dpkt.ip6.IP6OptsHeader
data
32

Chapter 2. API Reference

dpkt, Release [Link]

len
nxt
class dpkt.ip6.IP6DstOptsHeader(*args, **kwargs)
Bases: dpkt.ip6.IP6OptsHeader
data
len
nxt
class dpkt.ip6.IP6RoutingHeader(*args, **kwargs)
Bases: dpkt.ip6.IP6ExtensionHeader
sl_bits
unpack(buf )
data
len
nxt
rsvd_sl_bits
segs_left
type
class dpkt.ip6.IP6FragmentHeader(*args, **kwargs)
Bases: dpkt.ip6.IP6ExtensionHeader
unpack(buf )
frag_off
m_flag
data
frag_off_resv_m
id
nxt
resv
class dpkt.ip6.IP6AHHeader(*args, **kwargs)
Bases: dpkt.ip6.IP6ExtensionHeader
unpack(buf )
data
len
nxt
resv
seq
spi
class dpkt.ip6.IP6ESPHeader(*args, **kwargs)
Bases: dpkt.ip6.IP6ExtensionHeader

2.1. API Reference

33

dpkt, Release [Link]

unpack(buf )
data
seq
spi
dpkt.ip6.test_ipg()
dpkt.ip6.test_ip6_routing_header()
dpkt.ip6.test_ip6_fragment_header()
dpkt.ip6.test_ip6_options_header()
dpkt.ip6.test_ip6_ah_header()
dpkt.ip6.test_ip6_esp_header()
dpkt.ip6.test_ip6_extension_headers()

2.1.30 [Link] module

Internetwork Packet Exchange.
class [Link](*args, **kwargs)
Bases: [Link]
data
dst
len
pt
src
sum
tc

2.1.31 [Link] module

class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
[Link].test_llc()

2.1.32 [Link] module

Platform-dependent loopback header.
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data

34

Chapter 2. API Reference

dpkt, Release [Link]

family

2.1.33 [Link] module

Multi-threaded Routing Toolkit.
class [Link](*args, **kwargs)
Bases: [Link]
data
len
subtype
ts
type
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
attr_len
data
originated_ts
peer_as
peer_ip
prefix
prefix_len
seq
status
view
class [Link].BGP4MPMessage(*args, **kwargs)
Bases: [Link]
data
dst_as
dst_ip
family
intf
src_as
src_ip
class [Link].BGP4MPMessage_32(*args, **kwargs)
Bases: [Link]
data
dst_as

2.1. API Reference

35

dpkt, Release [Link]

dst_ip
family
intf
src_as
src_ip

2.1.34 [Link] module

Network Basic Input/Output System.
[Link].encode_name(name)
Return the NetBIOS first-level encoded name.
[Link].decode_name(nbname)
Return the NetBIOS first-level decoded nbname.
[Link].node_to_service_name((name, service, flags))
class [Link](*args, **kwargs)
Bases: [Link]
NetBIOS Name Service.
class Q(*args, **kwargs)
Bases: [Link].Q
cls
data
name
type
class [Link](*args, **kwargs)
Bases: [Link]
NetBIOS resource record.
unpack_rdata(buf, off )
cls
data
name
rdata
rlen
ttl
type
NS.pack_name(buf, name)
NS.unpack_name(buf, off )
[Link]
[Link]
[Link]
36

Chapter 2. API Reference

dpkt, Release [Link]

[Link]
[Link]
[Link]
[Link]
class [Link](*args, **kwargs)
Bases: [Link]
NetBIOS Session Service.
data
flags
len
type
class [Link](*args, **kwargs)
Bases: [Link]
NetBIOS Datagram Service.
data
flags
id
len
off
sport
src
type

2.1.35 [Link] module

Cisco Netflow.
class [Link](*args, **kwargs)
Bases: [Link]
Base class for Cisco Netflow packets.
unpack(buf )
class NetflowRecordBase(*args, **kwargs)
Bases: [Link]
Base class for netflow v1-v7 netflow records.
unpack(buf )
[Link]
[Link]
NetflowBase.sys_uptime
NetflowBase.unix_nsec

2.1. API Reference

37

dpkt, Release [Link]

NetflowBase.unix_sec
[Link]
class [Link].Netflow1(*args, **kwargs)
Bases: [Link]
Netflow Version 1.
class NetflowRecord(*args, **kwargs)
Bases: [Link]
Netflow v1 flow record.
bytes_sent
data
dst_addr
dst_port
end_time
input_iface
ip_proto
next_hop
output_iface
pad1
pad2
pad3
pkts_sent
reserved
src_addr
src_port
start_time
tcp_flags
tos
[Link]
[Link]
Netflow1.sys_uptime
Netflow1.unix_nsec
Netflow1.unix_sec
[Link]
class [Link].Netflow5(*args, **kwargs)
Bases: [Link]
Netflow Version 5.

38

Chapter 2. API Reference

dpkt, Release [Link]

class NetflowRecord(*args, **kwargs)

Bases: [Link]
Netflow v5 flow record.
bytes_sent
data
dst_addr
dst_as
dst_mask
dst_port
end_time
input_iface
ip_proto
next_hop
output_iface
pad1
pad2
pkts_sent
src_addr
src_as
src_mask
src_port
start_time
tcp_flags
tos
[Link]
[Link]
Netflow5.engine_id
Netflow5.engine_type
Netflow5.flow_sequence
[Link]
Netflow5.sys_uptime
Netflow5.unix_nsec
Netflow5.unix_sec
[Link]
class [Link].Netflow6(*args, **kwargs)
Bases: [Link]
Netflow Version 6. XXX - unsupported by Cisco, but may be found in the field.

2.1. API Reference

39

dpkt, Release [Link]

class NetflowRecord(*args, **kwargs)

Bases: [Link]
Netflow v6 flow record.
bytes_sent
data
dst_addr
dst_as
dst_mask
dst_port
end_time
in_encaps
input_iface
ip_proto
next_hop
out_encaps
output_iface
pad1
peer_nexthop
pkts_sent
src_addr
src_as
src_mask
src_port
start_time
tcp_flags
tos
[Link]
[Link]
Netflow6.engine_id
Netflow6.engine_type
Netflow6.flow_sequence
[Link]
Netflow6.sys_uptime
Netflow6.unix_nsec
Netflow6.unix_sec
[Link]

40

Chapter 2. API Reference

dpkt, Release [Link]

class [Link].Netflow7(*args, **kwargs)

Bases: [Link]
Netflow Version 7.
class NetflowRecord(*args, **kwargs)
Bases: [Link]
Netflow v7 flow record.
bytes_sent
data
dst_addr
dst_as
dst_mask
dst_port
end_time
flags
input_iface
ip_proto
next_hop
output_iface
pad2
pkts_sent
router_sc
src_addr
src_as
src_mask
src_port
start_time
tcp_flags
tos
[Link]
[Link]
Netflow7.flow_sequence
[Link]
Netflow7.sys_uptime
Netflow7.unix_nsec
Netflow7.unix_sec
[Link]
[Link].test_net_flow_v1_pack()

2.1. API Reference

41

dpkt, Release [Link]

[Link].test_net_flow_v1_unpack()
[Link].test_net_flow_v5_pack()
[Link].test_net_flow_v5_unpack()

2.1.36 [Link] module

Network Time Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
v
li
mode
data
delay
dispersion
flags
id
interval
originate_time
precision
receive_time
stratum
transmit_time
update_time
[Link].test_ntp_pack()
[Link].test_ntp_unpack()

2.1.37 [Link] module

Open Shortest Path First.
class [Link](*args, **kwargs)
Bases: [Link]
area
atype
auth
data
len
router

42

Chapter 2. API Reference

dpkt, Release [Link]

sum
type
v

2.1.38 [Link] module

Libpcap file format.
class [Link](*args, **kwargs)
Bases: [Link]
pcap packet header.
caplen
data
len
tv_sec
tv_usec
class [Link](*args, **kwargs)
Bases: [Link]
caplen
data
len
tv_sec
tv_usec
class [Link](*args, **kwargs)
Bases: [Link]
pcap file header.
data
linktype
magic
sigfigs
snaplen
thiszone
v_major
v_minor
class [Link](*args, **kwargs)
Bases: [Link]
data
linktype
magic

2.1. API Reference

43

dpkt, Release [Link]

sigfigs
snaplen
thiszone
v_major
v_minor
class [Link](fileobj, snaplen=1500, linktype=1)
Bases: object
Simple pcap dumpfile writer.
writepkt(pkt, ts=None)
close()
class [Link](fileobj)
Bases: object
Simple pypcap-compatible pcap file reader.
fd
fileno()
datalink()
setfilter(value, optimize=1)
readpkts()
next()
dispatch(cnt, callback, *args)
Collect and process packets with a user callback.
Return the number of packets processed, or 0 for a savefile.
Arguments:
cnt number of packets to process; or 0 to process all packets until EOF
callback function with (timestamp, pkt, *args) prototype *args optional arguments passed to callback
on execution
loop(callback, *args)
[Link].test_pcap_endian()
[Link].test_reader()

2.1.39 [Link] module

Protocol Independent Multicast.
class [Link](*args, **kwargs)
Bases: [Link]
v
type
data
rsvd
44

Chapter 2. API Reference

dpkt, Release [Link]

sum

2.1.40 [Link] module

Portmap / rpcbind.
class [Link](*args, **kwargs)
Bases: [Link]
data
port
prog
prot
vers

2.1.41 [Link] module

Point-to-Point Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
classmethod set_p(p, pktclass)
classmethod get_p(p)
unpack(buf )
pack_hdr()
data
p

2.1.42 [Link] module

PPP-over-Ethernet.
class [Link](*args, **kwargs)
Bases: [Link]
v
type
code
data
len
session
unpack(buf )

2.1. API Reference

45

dpkt, Release [Link]

2.1.43 [Link] module

class [Link](*args, **kwargs)
Bases: [Link]
command
data
header_type
qqNum
sequence
source
class [Link].QQ3Packet(*args, **kwargs)
Bases: [Link]
command
data
header_type
sequence
source
unknown1
unknown10
unknown11
unknown12
unknown13
unknown2
unknown3
unknown4
unknown5
unknown6
unknown7
unknown8
unknown9
class [Link].QQ5Packet(*args, **kwargs)
Bases: [Link]
command
data
header_type
qqNum
sequence
source

46

Chapter 2. API Reference

dpkt, Release [Link]

unknown

2.1.44 [Link] module

Radiotap
class [Link](*args, **kwargs)
Bases: [Link]
tsft_present
flags_present
rate_present
channel_present
fhss_present
ant_sig_present
ant_noise_present
lock_qual_present
tx_attn_present
db_tx_attn_present
dbm_tx_power_present
ant_present
db_ant_sig_present
db_ant_noise_present
rx_flags_present
chanplus_present
ext_present
unpack(buf )
class Antenna(*args, **kwargs)
Bases: [Link]
data
index
class [Link](*args, **kwargs)
Bases: [Link]
data
db
class [Link](*args, **kwargs)
Bases: [Link]
data
db
class [Link](*args, **kwargs)
Bases: [Link]
2.1. API Reference

47

dpkt, Release [Link]

data
flags
freq
class [Link](*args, **kwargs)
Bases: [Link]
data
pattern
set
class [Link](*args, **kwargs)
Bases: [Link]
fcs
data
val
class [Link](*args, **kwargs)
Bases: [Link]
data
val
[Link]
[Link]
[Link]
Radiotap.present_flags
[Link]
class [Link](*args, **kwargs)
Bases: [Link]
data
val
class [Link](*args, **kwargs)
Bases: [Link]
data
val
class [Link](*args, **kwargs)
Bases: [Link]
data
usecs
class [Link](*args, **kwargs)
Bases: [Link]
data
val

48

Chapter 2. API Reference

dpkt, Release [Link]

class [Link](*args, **kwargs)

Bases: [Link]
data
db
class [Link](*args, **kwargs)
Bases: [Link]
data
db
class [Link](*args, **kwargs)
Bases: [Link]
data
db
class [Link](*args, **kwargs)
Bases: [Link]
data
dbm
[Link].test_Radiotap()
[Link].test_fcs()

2.1.45 [Link] module

Remote Authentication Dial-In User Service.
class [Link](*args, **kwargs)
Bases: [Link]
attrs =
unpack(buf )
auth
code
data
id
len
[Link].parse_attrs(buf )
Parse attributes buffer into a list of (type, data) tuples.

2.1.46 [Link] module

Remote Framebuffer Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
data

2.1. API Reference

49

dpkt, Release [Link]

type
class [Link](*args, **kwargs)
Bases: [Link]
data
pad
pixel_fmt
class [Link](*args, **kwargs)
Bases: [Link]
data
num_encodings
pad
class [Link](*args, **kwargs)
Bases: [Link]
data
height
incremental
width
x_position
y_position
class [Link](*args, **kwargs)
Bases: [Link]
data
down_flag
key
pad
class [Link](*args, **kwargs)
Bases: [Link]
button_mask
data
x_position
y_position
class [Link](*args, **kwargs)
Bases: [Link]
data
num_rects
pad
class [Link](*args, **kwargs)
Bases: [Link]

50

Chapter 2. API Reference

dpkt, Release [Link]

data
first_colour
num_colours
pad
class [Link](*args, **kwargs)
Bases: [Link]
data
length
pad

2.1.47 [Link] module

Routing Information Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
cmd
data
rsvd
v
class [Link](*args, **kwargs)
Bases: [Link]
addr
data
family
metric
next_hop
route_tag
subnet
class [Link](*args, **kwargs)
Bases: [Link]
auth
data
rsvd
type
[Link].test_rtp_pack()
[Link].test_rtp_unpack()

2.1. API Reference

51

dpkt, Release [Link]

2.1.48 [Link] module

Remote Procedure Call.
class [Link](*args, **kwargs)
Bases: [Link]
class Auth(*args, **kwargs)
Bases: [Link]
unpack(buf )
data
flavor
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
proc
prog
rpcvers
vers
class [Link](*args, **kwargs)
Bases: [Link]
class Accept(*args, **kwargs)
Bases: [Link]
unpack(buf )
data
stat
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
stat
[Link](buf )
[Link]
[Link]
[Link](buf )
[Link]
[Link]
[Link]
[Link].unpack_xdrlist(cls, buf )
[Link].pack_xdrlist(*args)

52

Chapter 2. API Reference

dpkt, Release [Link]

2.1.49 [Link] module

Real-Time Transport Protocol
class [Link](*args, **kwargs)
Bases: [Link]
csrc =
version
p
x
cc
m
pt
data
seq
ssrc
ts
unpack(buf )

2.1.50 [Link] module

Rx Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
call
cid
data
epoch
flags
security
seq
serial
service
status
sum
type

2.1. API Reference

53

dpkt, Release [Link]

2.1.51 [Link] module

Cisco Skinny Client Control Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
data
line_instance
class [Link](*args, **kwargs)
Bases: [Link]
call_id
call_type
called_party
called_party_name
calling_party
calling_party_name
data
line_instance
orig_called_party
orig_called_party_name
class [Link](*args, **kwargs)
Bases: [Link]
call_id
call_state
data
line_instance
class [Link](*args, **kwargs)
Bases: [Link]
call_id
data
line_instance
class [Link](*args, **kwargs)
Bases: [Link]
conference_id
data
passthruparty_id
class [Link](*args, **kwargs)
Bases: [Link]
call_id
data

54

Chapter 2. API Reference

dpkt, Release [Link]

display_msg
line_instance
msg_timeout
class [Link](*args, **kwargs)
Bases: [Link]
data
display_msg
class [Link](*args, **kwargs)
Bases: [Link]
button
data
class [Link](*args, **kwargs)
Bases: [Link]
conference_id
data
echo_cancel_type
g723_bitrate
ms_packet
passthruparty_id
payload_capability
class [Link](*args, **kwargs)
Bases: [Link]
channel_status
data
ip
passthruparty_id
port
class [Link](*args, **kwargs)
Bases: [Link]
call_id
data
line_id
softkey_map
softkey_set
class [Link](*args, **kwargs)
Bases: [Link]
data
lamp_mode

2.1. API Reference

55

dpkt, Release [Link]

stimulus
stimulus_instance
class [Link](*args, **kwargs)
Bases: [Link]
data
speaker
class [Link](*args, **kwargs)
Bases: [Link]
conference_id
data
g723_bitrate
max_frames_per_pkt
ms_packet
passthruparty_id
payload_capability
precedence
remote_ip
remote_port
silence_suppression
class [Link](*args, **kwargs)
Bases: [Link]
data
tone
class [Link](*args, **kwargs)
Bases: [Link]
conference_id
data
passthruparty_id
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
len
msg
msgid
rsvd

56

Chapter 2. API Reference

dpkt, Release [Link]

2.1.52 [Link] module

Stream Control Transmission Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
dport
sport
sum
vtag
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
flags
len
type
[Link].test_sctp_pack()
[Link].test_sctp_unpack()

2.1.53 [Link] module

Session Initiation Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
SIP request.
class [Link](*args, **kwargs)
Bases: [Link]
SIP response.

2.1.54 [Link] module

Linux libpcap cooked capture encapsulation.
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
ethtype
hdr

2.1. API Reference

57

dpkt, Release [Link]

hlen
hrd
type

2.1.55 [Link] module

Server Message Block.
class [Link](*args, **kwargs)
Bases: [Link]
cmd
data
err
flags1
flags2
mid
pad
pid
proto
tid
uid

2.1.56 [Link] module

Snoop file format.
class [Link](*args, **kwargs)
Bases: [Link]
snoop packet header.
cum_drops
data
incl_len
orig_len
rec_len
ts_sec
ts_usec
class [Link](*args, **kwargs)
Bases: [Link]
snoop file header.
data
linktype
58

Chapter 2. API Reference

dpkt, Release [Link]

magic
v
class [Link](fileobj, linktype=4)
Bases: object
Simple snoop dumpfile writer.
writepkt(pkt, ts=None)
close()
class [Link](fileobj)
Bases: object
Simple pypcap-compatible snoop file reader.
fileno()
datalink()
setfilter(value, optimize=1)
readpkts()
dispatch(cnt, callback, *args)
loop(callback, *args)

2.1.57 [Link] module

Secure Sockets Layer / Transport Layer Security.
class [Link].SSL2(*args, **kwargs)
Bases: [Link]
unpack(buf )
data
len
msg
pad
[Link].parse_variable_array(buf, lenbytes)
Parse an array described using the Type name<x..y> syntax from the spec Read a length at the start of buf,
and returns that many bytes after, in a tuple with the TOTAL bytes consumed (including the size). This does not
check that the array is the right length for any given datatype.
exception [Link].SSL3Exception
Bases: [Link]
class [Link](*args, **kwargs)
Bases: [Link]
SSLv3 or TLSv1+ packet.
In addition to the fields specified in the header, there are compressed and decrypted fields, indicating whether, in
the language of the spec, this is a TLSPlaintext, TLSCompressed, or TLSCiphertext. The application will have
to figure out when its appropriate to change these values.
length

2.1. API Reference

59

dpkt, Release [Link]

unpack(buf )
data
type
version
class [Link](*args, **kwargs)
Bases: [Link]
ChangeCipherSpec message is just a single byte with value 1
data
type
class [Link]
Bases: str
As far as TLSRecord is concerned, AppData is just an opaque blob.
class [Link](*args, **kwargs)
Bases: [Link]
data
description
level
class [Link](*args, **kwargs)
Bases: [Link]
data
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
random
version
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
random
version
class [Link](*args, **kwargs)
Bases: [Link]
data
[Link]
alias of TLSUnknownHandshake
[Link]
alias of TLSUnknownHandshake

60

Chapter 2. API Reference

dpkt, Release [Link]

[Link]
alias of TLSUnknownHandshake
[Link]
alias of TLSUnknownHandshake
[Link]
alias of TLSUnknownHandshake
[Link]
alias of TLSUnknownHandshake
[Link]
alias of TLSUnknownHandshake
class [Link](*args, **kwargs)
Bases: [Link]
A TLS Handshake message
This goes for all messages encapsulated in the Record layer, but especially important for handshakes and app
data: A message may be spread across a number of TLSRecords, in addition to the possibility of there being
more than one in a given Record. You have to put together the contents of TLSRecords yourself.
unpack(buf )
length
data
length_bytes
type
class [Link]
Bases: object
[Link].tls_multi_factory(buf )
Attempt to parse one or more TLSRecords out of buf
Parameters buf string containing SSL/TLS messages. May have an incomplete record on the
end
Returns
[TLSRecord] int, total bytes consumed, != len(buf) if an incomplete record was left at
the end.
Raises SSL3Exception.
class [Link]
Bases: object
Test basic TLSRecord functionality For this test, the contents of the record doesnt matter, since were not
parsing the next layer.
classmethod setup_class()
test_content_type()
test_version()
test_length()
test_data()

2.1. API Reference

61

dpkt, Release [Link]

test_initial_flags()
test_repack()
test_total_length()
test_raises_need_data_when_buf_is_short()
class [Link]
Bases: object
Its just a byte. This will be quick, I promise
classmethod setup_class()
test_parses()
test_total_length()
class [Link]
Bases: object
AppData is basically just a string
test_value()
class [Link]
Bases: object
classmethod setup_class()
test_created_inside_message()
test_length()
test_raises_need_data()
class [Link]
Bases: object
This data is extracted from and verified by Wireshark
classmethod setup_class()
test_client_hello_constructed()
Make sure the correct class was constructed
test_client_random_correct()
test_cipher_suite_length()
test_session_id()
test_compression_methods()
test_total_length()
class [Link]
Bases: object
Again, from Wireshark
classmethod setup_class()
test_constructed()
test_random_correct()
test_cipher_suite()

62

Chapter 2. API Reference

dpkt, Release [Link]

test_total_length()
class [Link]
Bases: object
Made up test data
classmethod setup_class()
test_num_messages()
test_bytes_parsed()
test_first_msg_data()
test_second_msg_data()

2.1.58 dpkt.ssl_ciphersuites module

Nicely formatted cipher suite definitions for TLS
A list of cipher suites in the form of CipherSuite objects. These are supposed to be immutable; dont mess with them.
class dpkt.ssl_ciphersuites.CipherSuite(code, name, kx, auth, encoding, mac)
Bases: object
Encapsulates a cipher suite.
Members/args: * code: two-byte ID code, as int * name: as in TLS_RSA_WITH_RC4_40_MD5 * kx: key
exchange algorithm, string * auth: authentication algorithm, string * encoding: encoding algorithm * mac:
message authentication code algorithm
MAC_SIZES = {SHA: 20, SHA256: 32, MD5: 16}
BLOCK_SIZES = {AES_256_CBC: 16}
mac_size
In bytes. Default to 0.
block_size
In bytes. Default to 1.

2.1.59 [Link] module

Spanning Tree Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
age
max_age
bridge_id
data
flags
hello
port_id
proto_id

2.1. API Reference

63

dpkt, Release [Link]

root_id
root_path
type
v
fd
[Link].test_stp()

2.1.60 [Link] module

Simple Traversal of UDP through NAT.
class [Link](*args, **kwargs)
Bases: [Link]
data
len
type
xid
[Link](buf )
[Link].parse_attrs(buf )
Parse [Link] buffer into a list of (attribute, data) tuples.
[Link].test_stun_response()

2.1.61 [Link] module

Transmission Control Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
opts =
off
unpack(buf )
ack
data
dport
flags
seq
sport
sum
urp
win

64

Chapter 2. API Reference

dpkt, Release [Link]

[Link].parse_opts(buf )
Parse TCP option buffer into a list of (option, data) tuples.
[Link].test_parse_opts()

2.1.62 [Link] module

Telnet.
[Link].strip_options(buf )
Return a list of lines and dict of options from telnet data.
[Link].test_telnet()

2.1.63 [Link] module

Trivial File Transfer Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
opcode
[Link].test_op_rrq()
[Link].test_op_data()
[Link].test_op_err()

2.1.64 [Link] module

Transparent Network Substrate.
class [Link](*args, **kwargs)
Bases: [Link]
unpack(buf )
data
hdrsum
length
msg
pktsum
rsvd
type
[Link].test_tns()

2.1. API Reference

65

dpkt, Release [Link]

2.1.65 [Link] module

ISO Transport Service on top of the TCP (TPKT).
class [Link](*args, **kwargs)
Bases: [Link]
data
len
rsvd
v

2.1.66 [Link] module

User Datagram Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
data
dport
sport
sum
ulen

2.1.67 [Link] module

Virtual Router Redundancy Protocol.
class [Link](*args, **kwargs)
Bases: [Link]
addrs = ()
auth =
v
type
unpack(buf )
advtime
atype
count
data
priority
sum
vrid
[Link].test_vrrp()

66

Chapter 2. API Reference

dpkt, Release [Link]

2.1.68 [Link] module

Yahoo Messenger.
class [Link](*args, **kwargs)
Bases: [Link]
connid
data
length
magic
nick1
nick2
service
type
unknown
version
class [Link](*args, **kwargs)
Bases: [Link]
data
length
type
unknown1
unknown2
version

2.1. API Reference

67

dpkt, Release [Link]

68

Chapter 2. API Reference

CHAPTER 3

About dpkt

3.1 Authors
3.1.1 Original author
Dug Song <dugsong@[Link]>

3.1.2 Contributors
Timur Alperovich <timuralp@[Link]> radiotap module
Nic Bellamy <[Link]@[Link]> HTTP header parsing fix
the grugq <thegrugq@[Link]> better RTP module
David Helder <dhelder@[Link]> bug fixes
Przemyslaw Karwasiecki <karwas@[Link]> TABLE_DUMP in MRT module
Reza Lotun <rlotun@[Link]> MetaPacket cleanup
Jeff Nathan <jeff@[Link]> bug fixes
Tim Newsham <newsham@[Link]> IPv6 bugfixing and improvements
[Link]@[Link] Snoop file parser
Jon Oberheide <jon@[Link]> STUN, H.225, TPKT, NTP, RIP, Diameter, SCTP, BGP, MRT, RX modules
plotnikoff@[Link] handle dynamic imports from py2exe/[Link]/zipped egg packages
simdream@[Link] handle multiple cookie values in HTTP
Owen Stephens <owen@[Link]> IP6 extension header support
Robert Stone <otaku@[Link]> Netflow and QQ modules
Thomas Taranowski <thomastaranowski@[Link]> dnet IP checksum bug on i386
Jirka Vejrazka bug fixes
Tim Yardley <yardley@[Link]> DHCP definitions
If you want to contribute to dpkt, see Contributing.

69

dpkt, Release [Link]

3.2 Changelog
3.3 Development plans
3.3.1 Current plans
Be Awesome

3.3.2 Future plans

Maintain the Awesome

3.4 Contributing
3.4.1 Report a Bug or Make a Feature Request
Please go to the GitHub Issues page: [Link]

3.4.2 Checkout the Code

git clone [Link]

3.4.3 Become a Developer

dpkt uses the GitHub Flow model: GitHub Flow
To work on something new, create a descriptively named branch off of master (ie: my-awesome)
Commit to that branch locally and regularly push your work to the same named branch on the server
When you need feedback or help, or you think the branch is ready for merging, open a pull request
After someone else has reviewed and signed off on the feature, they or you can merge it into master
New Feature or Bug
$
$
$
$
$

git checkout -b my-awesome

git push -u origin my-awesome
<code for a bit>; git push
<code for a bit>; git push
tox (this will run all the tests)

Go to github and hit New pull request

Someone reviews it and says AOK
Merge the pull request (green button)

70

Chapter 3. About dpkt

dpkt, Release [Link]

3.5 License
BSD 3-Clause License, as the upstream project

3.5. License

71

dpkt, Release [Link]

72

Chapter 3. About dpkt

CHAPTER 4

Administration

4.1 Notes
4.1.1 PyPI Release How-To
Notes and information on how to do the PyPI release for the dpkt project.
Package Requirements
pip install tox
pip install wheel
Tox Background
Tox will install the dpkt package into a blank virtualenv and then execute all the tests against the newly installed
package. So if everything goes okay, you know the pypi package installed fine and the tests (which pull from the
installed dpkt package) also ran okay.
Create the PyPI Release
$
$
$
$

cd dpkt
tox
vi dpkt/__init__.py and bump the version
python [Link] release
<enter your pypi password>

If everything above went okay...

$
$
$
$
$

git
get
git
git
git

add dpkt/__init__.py
commit -m "dpkt version 1.8.7 (or whatever)"
tag v1.8.7 (or whatever)
push --tags
push

73

dpkt, Release [Link]

Git Releases (discussion)

You can also do a release on GitHub (the tags above are perfect for that). In general this is discouraged, people
should always do a $pip install dpkt. If people want older releases they can do a $pip install dpkt==<old version>.
Providing tarballs/zip file on GitHub will just confuse new users and theyll have a bad experience when trying to
deal with a tarball.

74

Chapter 4. Administration

Python Module Index

a
[Link], 7
[Link], 7
[Link], 8
[Link], 8
[Link], 9
[Link], 9
dpkt.asn1, 10

dpkt.icmp6, 24
dpkt.ieee80211, 25
[Link], 31
[Link], 31
dpkt.ip6, 32
[Link], 34

l
[Link], 34
[Link], 34

[Link], 10

[Link], 35

[Link], 14
dpkt.crc32c, 14

[Link], 36
[Link], 37
[Link], 42

[Link], 14
[Link], 15
[Link], 15
[Link], 16
[Link], 18
[Link], 19

o
[Link], 42

[Link], 19
[Link], 20
examples.print_packets, 3

[Link], 43
[Link], 44
[Link], 45
[Link], 45
[Link], 45

[Link], 20
[Link], 21

[Link], 46

[Link], 47
[Link], 49
[Link], 49
[Link], 51
[Link], 52
[Link], 53
[Link], 53

dpkt.h225, 21
[Link], 22
[Link], 22

i
[Link], 23

75

dpkt, Release [Link]

s
[Link], 54
[Link], 57
[Link], 57
[Link], 57
[Link], 58
[Link], 58
[Link], 59
dpkt.ssl_ciphersuites, 63
[Link], 63
[Link], 64

t
[Link], 64
[Link], 65
[Link], 65
[Link], 65
[Link], 66

u
[Link], 66

v
[Link], 66

y
[Link], 67

76

Python Module Index

Index

A
aa ([Link] attribute), 16
ack ([Link] attribute), 64
ack_policy
([Link]
attribute), 26
ActivateCallPlane (class in [Link]), 54
add() (in module dpkt.crc32c), 14
addr ([Link] attribute), 51
addrs ([Link] attribute), 66
advtime ([Link] attribute), 66
afi ([Link] attribute), 13
afi ([Link] attribute), 12
afi ([Link] attribute), 12
aflags ([Link] attribute), 8
age ([Link] attribute), 63
AH (class in [Link]), 7
aid (dpkt.ieee80211.IEEE80211.Assoc_Resp attribute),
27
alen ([Link] attribute), 14
algorithm ([Link] attribute),
27
an ([Link] attribute), 18
an ([Link] attribute), 36
ant_noise_present ([Link] attribute), 47
ant_present ([Link] attribute), 47
ant_sig_present ([Link] attribute), 47
AOE (class in [Link]), 8
AOEATA (class in [Link]), 8
aoeccmd ([Link] attribute), 9
AOECFG (class in [Link]), 9
app_id ([Link] attribute), 16
ar ([Link] attribute), 18
ar ([Link] attribute), 36
area ([Link] attribute), 42
ARP (class in [Link]), 9
asn ([Link] attribute), 10
asn ([Link] attribute), 12

asn ([Link]
attribute), 12
ast ([Link] attribute), 7
atim ([Link] attribute), 30
attr_len ([Link] attribute), 35
attrs ([Link] attribute), 49
atype ([Link] attribute), 42
atype ([Link] attribute), 66
Auth (class in [Link]), 51
auth ([Link] attribute), 7
auth ([Link] attribute), 22
auth ([Link] attribute), 42
auth ([Link] attribute), 49
auth ([Link] attribute), 51
auth ([Link] attribute), 66
auth_seq ([Link] attribute), 27
AVP (class in [Link]), 16

B
BGP (class in [Link]), 10
[Link] (class in [Link]), 13
[Link] (class in [Link]), 13
[Link] (class in [Link]), 10
[Link] (class in [Link]), 10
[Link] (class in [Link]),
10
[Link] (class in [Link]), 10
[Link] (class in [Link]), 13
[Link] (class in [Link]), 10
[Link] (class in [Link]), 11
[Link] (class in [Link]), 11
[Link] (class in [Link]), 11
[Link] (class in
[Link]), 11
[Link]
(class
in
[Link]), 11
[Link] (class in [Link]), 12
[Link] (class in [Link]),
12
[Link] (class in
[Link]), 12
77

dpkt, Release [Link]

[Link]
(class in [Link]), 12
[Link] (class in [Link]), 11
[Link]
(class
in
[Link]), 12
[Link] (class in
[Link]), 12
[Link]
(class
in
[Link]), 12
[Link] (class in [Link]),
11
[Link] (class in [Link]), 11
[Link] (class in [Link]), 11
[Link] (class in [Link]),
12
BGP4MPMessage (class in [Link]), 35
BGP4MPMessage_32 (class in [Link]), 35
block_size (dpkt.ssl_ciphersuites.CipherSuite attribute),
63
BLOCK_SIZES (dpkt.ssl_ciphersuites.CipherSuite attribute), 63
body ([Link] attribute), 22
bridge_id ([Link] attribute), 63
bssid ([Link] attribute), 28
bssid ([Link] attribute), 28
bssid ([Link] attribute),
29
bssid
(dpkt.ieee80211.IEEE80211.MGMT_Frame
attribute), 27
bufcnt ([Link] attribute), 9
button ([Link] attribute), 55
button_mask ([Link] attribute), 50
bytes_sent ([Link] attribute), 38
bytes_sent ([Link] attribute), 39
bytes_sent ([Link] attribute), 40
bytes_sent ([Link] attribute), 41

C
call ([Link] attribute), 53
call_id ([Link] attribute), 54
call_id ([Link] attribute), 54
call_id ([Link] attribute), 54
call_id ([Link] attribute), 54
call_id ([Link] attribute), 55
call_state ([Link] attribute), 54
call_type ([Link] attribute), 54
called_party ([Link] attribute), 54
called_party_name ([Link] attribute), 54
CallInfo (class in [Link]), 54
78

calling_party ([Link] attribute), 54

calling_party_name ([Link] attribute), 54
CallState (class in [Link]), 54
capability (dpkt.ieee80211.IEEE80211.Assoc_Req attribute), 27
capability (dpkt.ieee80211.IEEE80211.Assoc_Resp attribute), 27
capability ([Link] attribute),
27
capability (dpkt.ieee80211.IEEE80211.Reassoc_Req attribute), 27
caplen ([Link] attribute), 43
caplen ([Link] attribute), 43
category ([Link] attribute),
28
cc ([Link] attribute), 53
CDP (class in [Link]), 14
[Link] (class in [Link]), 14
[Link] (class in [Link]), 14
ch ([Link] attribute), 29
chaddr ([Link] attribute), 15
channel_present ([Link] attribute), 47
channel_status ([Link] attribute), 55
chanplus_present ([Link] attribute), 47
Chunk (class in [Link]), 57
ciaddr ([Link] attribute), 15
cid ([Link] attribute), 53
CipherSuite (class in dpkt.ssl_ciphersuites), 63
cksum() (in module dpkt.crc32c), 14
ClearPromptStatus (class in [Link]), 54
close() ([Link] method), 44
close() ([Link] method), 59
CloseReceiveChannel (class in [Link]), 54
cls ([Link].Q attribute), 17
cls ([Link] attribute), 17
cls ([Link].Q attribute), 36
cls ([Link] attribute), 36
cmd ([Link] attribute), 8
cmd ([Link] attribute), 16
cmd ([Link] attribute), 51
cmd ([Link] attribute), 58
cmdstat ([Link] attribute), 8
code ([Link] attribute), 13
code ([Link] attribute), 10
code
([Link]
attribute), 10
code ([Link] attribute), 16
code ([Link] attribute), 24
code (dpkt.icmp6.ICMP6 attribute), 25
code ([Link] attribute), 28
code ([Link] attribute), 45
code ([Link] attribute), 49

Index

dpkt, Release [Link]

command ([Link].QQ3Packet attribute), 46

command ([Link].QQ5Packet attribute), 46
command ([Link] attribute), 46
comment ([Link] attribute), 21
compress() ([Link] method), 21
compressed ([Link] attribute), 26
conference_id
([Link]
attribute), 54
conference_id
([Link]
attribute), 55
conference_id
([Link]
attribute), 56
conference_id ([Link] attribute), 56
connid ([Link] attribute), 67
control (dpkt.ieee80211.IEEE80211.QoS_Data attribute),
29
count ([Link] attribute), 30
count ([Link] attribute), 30
count ([Link].Netflow1 attribute), 38
count ([Link].Netflow5 attribute), 39
count ([Link].Netflow6 attribute), 40
count ([Link].Netflow7 attribute), 41
count ([Link] attribute), 37
count ([Link] attribute), 66
cslen ([Link] attribute), 9
csrc ([Link] attribute), 53
ctl ([Link] attribute), 26
ctl ([Link] attribute),
26
ctrl ([Link] attribute), 30
cum_drops ([Link] attribute), 58
current_ap (dpkt.ieee80211.IEEE80211.Reassoc_Req attribute), 27
CutText (class in [Link]), 51

data ([Link] attribute),

10
data ([Link] attribute), 13
data ([Link] attribute), 12
data ([Link] attribute), 12
data ([Link]
attribute), 11
data ([Link]
attribute), 12
data ([Link]
attribute), 12
data
([Link]
attribute), 11
data ([Link] attribute), 12
data ([Link]
attribute), 12
data ([Link] attribute), 11
data ([Link] attribute),
11
data ([Link] attribute), 11
data
([Link]
attribute), 12
data ([Link] attribute), 13
data ([Link].RouteIPV4 attribute), 13
data ([Link].RouteIPV6 attribute), 13
data ([Link] attribute), 14
data ([Link] attribute), 14
data ([Link] attribute), 14
data ([Link] attribute), 15
data ([Link] attribute), 16
data ([Link] attribute), 16
data ([Link] attribute), 18
data ([Link].Q attribute), 17
data ([Link] attribute), 17
D
data ([Link] attribute), 19
da ([Link] attribute), data ([Link] attribute), 19
data ([Link] attribute), 20
29
data ([Link] attribute), 20
data ([Link] attribute), 7
data ([Link] attribute), 20
data ([Link] attribute), 7
data ([Link] attribute), 21
data ([Link] attribute), 8
data ([Link] attribute), 21
data ([Link] attribute), 8
data (dpkt.h225.H225 attribute), 21
data ([Link] attribute), 8
data ([Link] attribute), 21
data ([Link] attribute), 9
data ([Link] attribute), 22
data ([Link] attribute), 9
data ([Link] attribute), 24
data ([Link] attribute), 13
data ([Link] attribute), 23
data ([Link] attribute), 13
data ([Link] attribute), 24
data ([Link] attribute), 10
data ([Link] attribute), 23
data ([Link] attribute), 10
data ([Link] at- data ([Link] attribute), 23
data ([Link] attribute), 24
tribute), 10
data ([Link] attribute), 24

Index

79

dpkt, Release [Link]

data ([Link] attribute), 23

data (dpkt.ip6.IP6OptsHeader attribute), 32
data (dpkt.icmp6.ICMP6 attribute), 25
data (dpkt.ip6.IP6RoutingHeader attribute), 33
data ([Link] attribute), 25
data ([Link] attribute), 34
data ([Link] attribute), 24
data ([Link] attribute), 34
data ([Link] attribute), 25
data ([Link].BGP4MPMessage attribute), 35
data ([Link] attribute), 25
data ([Link].BGP4MPMessage_32 attribute), 35
data ([Link] attribute), 24
data ([Link] attribute), 35
data ([Link] attribute), 24
data ([Link] attribute), 35
data (dpkt.ieee80211.IEEE80211 attribute), 30
data ([Link] attribute), 37
data ([Link] attribute), 26
data ([Link] attribute), 36
data ([Link] attribute), 28
data ([Link].Q attribute), 36
data (dpkt.ieee80211.IEEE80211.Assoc_Req attribute), data ([Link] attribute), 36
27
data ([Link] attribute), 37
data (dpkt.ieee80211.IEEE80211.Assoc_Resp attribute), data ([Link].Netflow1 attribute), 38
27
data ([Link] attribute), 38
data ([Link] attribute), 27
data ([Link].Netflow5 attribute), 39
data ([Link] attribute), 27
data ([Link] attribute), 39
data ([Link] attribute), 26 data ([Link].Netflow6 attribute), 40
data ([Link] data ([Link] attribute), 40
attribute), 28
data ([Link].Netflow7 attribute), 41
data ([Link] ([Link] attribute), 41
attribute), 28
data ([Link] attribute), 37
data ([Link] at- data ([Link] attribute), 42
tribute), 26
data ([Link] attribute), 42
data ([Link] attribute), 30
data ([Link] attribute), 43
data ([Link] attribute), 26
data ([Link] attribute), 43
data ([Link] attribute), 26
data ([Link] attribute), 43
data ([Link] attribute), 28
data ([Link] attribute), 43
data ([Link] attribute), data ([Link] attribute), 44
28
data ([Link] attribute), 45
data ([Link] attribute), data ([Link] attribute), 45
29
data ([Link] attribute), 45
data ([Link] attribute), 29 data ([Link].QQ3Packet attribute), 46
data ([Link] attribute), 28
data ([Link].QQ5Packet attribute), 46
data ([Link] attribute), 27 data ([Link] attribute), 46
data ([Link] attribute), 29
data ([Link] attribute), 48
data ([Link] attribute), 29
data ([Link] attribute), 47
data ([Link] attribute), 30
data ([Link] attribute), 47
data ([Link] attribute), 29
data ([Link] attribute), 47
data (dpkt.ieee80211.IEEE80211.MGMT_Frame at- data ([Link] attribute), 47
tribute), 27
data ([Link] attribute),
data (dpkt.ieee80211.IEEE80211.QoS_Data attribute), 29
49
data (dpkt.ieee80211.IEEE80211.Reassoc_Req attribute), data ([Link] attribute),
27
49
data ([Link] attribute), 26
data ([Link] attribute), 49
data ([Link] attribute), 30
data ([Link] attribute),
data ([Link] attribute), 31
49
data ([Link] attribute), 31
data ([Link] attribute), 48
data (dpkt.ip6.IP6 attribute), 32
data ([Link] attribute), 48
data (dpkt.ip6.IP6AHHeader attribute), 33
data ([Link] attribute), 48
data (dpkt.ip6.IP6DstOptsHeader attribute), 33
data ([Link] attribute), 48
data (dpkt.ip6.IP6ESPHeader attribute), 34
data ([Link] attribute), 48
data (dpkt.ip6.IP6FragmentHeader attribute), 33
data ([Link] attribute), 48
data (dpkt.ip6.IP6HopOptsHeader attribute), 32
data ([Link] attribute), 48

80

Index

dpkt, Release [Link]

data ([Link] attribute), 49

data ([Link] attribute), 51
data ([Link] attribute), 50
data ([Link] attribute), 50
data ([Link] attribute), 50
data ([Link] attribute), 50
data ([Link] attribute), 49
data ([Link] attribute), 50
data ([Link] attribute), 50
data ([Link] attribute), 50
data ([Link] attribute), 51
data ([Link] attribute), 51
data ([Link] attribute), 51
data ([Link] attribute), 52
data ([Link] attribute), 52
data ([Link] attribute), 52
data ([Link] attribute), 52
data ([Link] attribute), 52
data ([Link] attribute), 52
data ([Link] attribute), 53
data ([Link] attribute), 53
data ([Link] attribute), 54
data ([Link] attribute), 54
data ([Link] attribute), 54
data ([Link] attribute), 54
data ([Link] attribute), 54
data ([Link] attribute), 54
data ([Link] attribute), 55
data ([Link] attribute), 55
data ([Link] attribute), 55
data ([Link] attribute), 55
data ([Link] attribute), 56
data ([Link] attribute), 55
data ([Link] attribute), 55
data ([Link] attribute), 56
data ([Link] attribute), 56
data ([Link] attribute), 56
data ([Link] attribute), 56
data ([Link] attribute), 57
data ([Link] attribute), 57
data ([Link] attribute), 57
data ([Link] attribute), 58
data ([Link] attribute), 58
data ([Link] attribute), 58
data ([Link].SSL2 attribute), 59
data ([Link] attribute), 60
data ([Link] attribute), 60
data ([Link] attribute), 60
data ([Link] attribute), 61
data ([Link] attribute), 60
data ([Link] attribute), 60
data ([Link] attribute), 60
data ([Link] attribute), 60
data ([Link] attribute), 63

Index

data ([Link] attribute), 64

data ([Link] attribute), 64
data ([Link] attribute), 65
data ([Link] attribute), 65
data ([Link] attribute), 66
data ([Link] attribute), 66
data ([Link] attribute), 66
data ([Link] attribute), 67
data ([Link] attribute), 67
Datagram (class in [Link]), 37
datalink() ([Link] method), 44
datalink() ([Link] method), 59
db ([Link] attribute), 47
db ([Link] attribute), 47
db ([Link] attribute),
49
db ([Link] attribute),
49
db ([Link] attribute),
49
db_ant_noise_present ([Link] attribute),
47
db_ant_sig_present ([Link] attribute), 47
db_tx_attn_present ([Link] attribute), 47
dbm ([Link] attribute), 49
dbm_tx_power_present
([Link]
attribute), 47
decode() (in module dpkt.asn1), 10
decode_name() (in module [Link]), 36
decompress() ([Link] method), 21
decorator_with_args() (in module [Link]), 14
delay ([Link] attribute), 42
deprecated() (in module [Link]), 14
deprecated_decorator() ([Link]
method), 15
description ([Link] attribute), 60
df ([Link] attribute), 31
DHCP (class in [Link]), 15
dialog ([Link]
attribute), 28
dialog ([Link]
attribute), 28
Diameter (class in [Link]), 15
dir ([Link] attribute), 52
dispatch() ([Link] method), 44
dispatch() ([Link] method), 59
dispersion ([Link] attribute), 42
display_msg ([Link] attribute),
54
display_msg ([Link] attribute), 55
DisplayPromptStatus (class in [Link]), 54
DisplayText (class in [Link]), 55
DNS (class in [Link]), 16
DNS.Q (class in [Link]), 17

81

dpkt, Release [Link]

[Link] (class in [Link]), 17

done() (in module dpkt.crc32c), 14
down_flag ([Link] attribute), 50
[Link] (module), 7
[Link] (module), 7
[Link] (module), 8
[Link] (module), 8
[Link] (module), 9
[Link] (module), 9
dpkt.asn1 (module), 10
[Link] (module), 10
[Link] (module), 14
dpkt.crc32c (module), 14
[Link] (module), 14
[Link] (module), 15
[Link] (module), 15
[Link] (module), 16
[Link] (module), 18
[Link] (module), 19
[Link] (module), 19
[Link] (module), 20
[Link] (module), 20
[Link] (module), 21
dpkt.h225 (module), 21
[Link] (module), 22
[Link] (module), 22
[Link] (module), 23
dpkt.icmp6 (module), 24
dpkt.ieee80211 (module), 25
[Link] (module), 31
[Link] (module), 31
dpkt.ip6 (module), 32
[Link] (module), 34
[Link] (module), 34
[Link] (module), 34
[Link] (module), 35
[Link] (module), 36
[Link] (module), 37
[Link] (module), 42
[Link] (module), 42
[Link] (module), 43
[Link] (module), 44
[Link] (module), 45
[Link] (module), 45
[Link] (module), 45
[Link] (module), 46
[Link] (module), 47
[Link] (module), 49
[Link] (module), 49
[Link] (module), 51
[Link] (module), 52
[Link] (module), 53
[Link] (module), 53
[Link] (module), 54

82

[Link] (module), 57
[Link] (module), 57
[Link] (module), 57
[Link] (module), 58
[Link] (module), 58
[Link] (module), 59
dpkt.ssl_ciphersuites (module), 63
[Link] (module), 63
[Link] (module), 64
[Link] (module), 64
[Link] (module), 65
[Link] (module), 65
[Link] (module), 65
[Link] (module), 66
[Link] (module), 66
[Link] (module), 66
[Link] (module), 67
dport ([Link] attribute), 57
dport ([Link] attribute), 64
dport ([Link] attribute), 66
dst ([Link] attribute), 20
dst ([Link] attribute), 26
dst ([Link] attribute), 26
dst ([Link] attribute),
26
dst ([Link] attribute), 26
dst ([Link] attribute), 26
dst ([Link] attribute), 28
dst ([Link] attribute),
28
dst ([Link] attribute),
29
dst ([Link] attribute), 29
dst (dpkt.ieee80211.IEEE80211.MGMT_Frame attribute), 27
dst ([Link] attribute), 26
dst ([Link] attribute), 31
dst (dpkt.ip6.IP6 attribute), 32
dst ([Link] attribute), 34
dst_addr ([Link] attribute), 38
dst_addr ([Link] attribute), 39
dst_addr ([Link] attribute), 40
dst_addr ([Link] attribute), 41
dst_as ([Link].BGP4MPMessage attribute), 35
dst_as ([Link].BGP4MPMessage_32 attribute), 35
dst_as ([Link] attribute),
39
dst_as ([Link] attribute),
40

Index

dpkt, Release [Link]

dst_as ([Link] attribute),

41
dst_ip ([Link].BGP4MPMessage attribute), 35
dst_ip ([Link].BGP4MPMessage_32 attribute), 35
dst_mask ([Link] attribute), 39
dst_mask ([Link] attribute), 40
dst_mask ([Link] attribute), 41
dst_port
([Link]
attribute), 38
dst_port
([Link]
attribute), 39
dst_port
([Link]
attribute), 40
dst_port
([Link]
attribute), 41
DTP (class in [Link]), 19
dur ([Link] attribute), 30
duration (dpkt.ieee80211.IEEE80211 attribute), 30

E
echo_cancel_type ([Link]
tribute), 55
encode_name() (in module [Link]), 36
end_id ([Link] attribute), 16
end_time ([Link]
tribute), 38
end_time ([Link]
tribute), 39
end_time ([Link]
tribute), 40
end_time ([Link]
tribute), 41
engine_id ([Link].Netflow5 attribute), 39
engine_id ([Link].Netflow6 attribute), 40
engine_type ([Link].Netflow5 attribute), 39
engine_type ([Link].Netflow6 attribute), 40
epoch ([Link] attribute), 53
err ([Link] attribute), 8
err ([Link] attribute), 58
errfeat ([Link] attribute), 8
Error, 18
error_flag ([Link] attribute), 16
ESP (class in [Link]), 19
Ethernet (class in [Link]), 20
ethtype ([Link] attribute), 57
examples.print_packets (module), 3
ext_present ([Link] attribute), 47
extended_length ([Link]
tribute), 11
extra ([Link] attribute), 21

Index

at-

atatatat-

at-

F
family ([Link] attribute), 8
family ([Link] attribute), 20
family ([Link] attribute), 34
family ([Link].BGP4MPMessage attribute), 35
family ([Link].BGP4MPMessage_32 attribute), 36
family ([Link] attribute), 51
fc (dpkt.ip6.IP6 attribute), 32
fcs ([Link] attribute), 48
fd ([Link] attribute), 44
fd ([Link] attribute), 64
fhss_present ([Link] attribute), 47
file ([Link] attribute), 15
FileHdr (class in [Link]), 43
FileHdr (class in [Link]), 58
filename ([Link] attribute), 21
fileno() ([Link] method), 44
fileno() ([Link] method), 59
first_colour ([Link] attribute), 51
fl ([Link] attribute), 8
flags ([Link] attribute), 8
flags ([Link] attribute), 13
flags ([Link] attribute), 15
flags ([Link] attribute), 16
flags ([Link] attribute), 16
flags ([Link] attribute), 20
flags ([Link] attribute), 21
flags ([Link] attribute), 37
flags ([Link] attribute), 37
flags ([Link] attribute), 41
flags ([Link] attribute), 42
flags ([Link] attribute), 48
flags ([Link] attribute), 53
flags ([Link] attribute), 57
flags ([Link] attribute), 63
flags ([Link] attribute), 64
flags1 ([Link] attribute), 58
flags2 ([Link] attribute), 58
flags_present ([Link] attribute), 47
FLAP (class in [Link]), 7
flavor ([Link] attribute), 52
flow (dpkt.ip6.IP6 attribute), 32
flow_sequence ([Link].Netflow5 attribute), 39
flow_sequence ([Link].Netflow6 attribute), 40
flow_sequence ([Link].Netflow7 attribute), 41
frag_off (dpkt.ip6.IP6FragmentHeader attribute), 33
frag_off_resv_m (dpkt.ip6.IP6FragmentHeader attribute),
33
frag_seq ([Link] attribute), 28
frag_seq ([Link] attribute), 28
frag_seq ([Link] attribute), 29

83

dpkt, Release [Link]

frag_seq

([Link] at- hlen ([Link] attribute), 57

tribute), 29
hlim (dpkt.ip6.IP6 attribute), 32
frag_seq (dpkt.ieee80211.IEEE80211.MGMT_Frame at- hln ([Link] attribute), 9
tribute), 27
hln ([Link] attribute), 15
FramebufferUpdate (class in [Link]), 50
hold ([Link] attribute), 22
FramebufferUpdateRequest (class in [Link]), 50
holdtime ([Link] attribute), 10
framectl (dpkt.ieee80211.IEEE80211 attribute), 30
hop_id ([Link] attribute), 16
freq ([Link] attribute), 48
hopindex ([Link] attribute), 29
from_ds (dpkt.ieee80211.IEEE80211 attribute), 25
hoppattern ([Link] attribute), 29
fwver ([Link] attribute), 9
hops ([Link] attribute), 15
hopset ([Link] attribute), 29
G
hrd ([Link] attribute), 9
g723_bitrate ([Link] attribute), hrd ([Link] attribute), 15
hrd ([Link] attribute), 58
55
g723_bitrate ([Link] at- HSRP (class in [Link]), 22
tribute), 56
I
get_aa() ([Link] method), 17
ICMP (class in [Link]), 23
get_cmd() ([Link] class method), 8
[Link] (class in [Link]), 23
get_opcode() ([Link] method), 17
[Link] (class in [Link]), 24
get_p() ([Link] class method), 45
[Link] (class in [Link]), 23
get_proto() ([Link] class method), 31
[Link] (class in [Link]), 23
get_proto() (dpkt.ip6.IP6 class method), 32
[Link] (class in [Link]), 23
get_qr() ([Link] method), 17
[Link] (class in [Link]), 24
get_ra() ([Link] method), 17
[Link] (class in [Link]), 23
get_rcode() ([Link] method), 17
ICMP6 (class in dpkt.icmp6), 24
get_rd() ([Link] method), 17
[Link] (class in dpkt.icmp6), 25
get_recur() ([Link] method), 20
[Link] (class in dpkt.icmp6), 24
get_type() ([Link] class method), 20
[Link] (class in dpkt.icmp6), 25
get_v() ([Link] method), 20
[Link] (class in dpkt.icmp6), 24
get_zero() ([Link] method), 17
[Link] (class in dpkt.icmp6), 24
giaddr ([Link] attribute), 15
[Link] (class in dpkt.icmp6), 24
GRE (class in [Link]), 20
id ([Link] attribute), 18
[Link] (class in [Link]), 20
id ([Link] attribute), 21
group ([Link] attribute), 22
id ([Link] attribute), 23
group ([Link] attribute), 31
id ([Link] attribute), 25
gw ([Link] attribute), 24
id ([Link] attribute), 30
Gzip (class in [Link]), 21
id ([Link] attribute), 30
GzipExtra (class in [Link]), 21
id ([Link] attribute), 29
H
id ([Link] attribute), 30
id ([Link] attribute), 29
H225 (class in dpkt.h225), 21
id ([Link] attribute), 30
[Link] (class in dpkt.h225), 21
id ([Link] attribute), 31
hdr ([Link] attribute), 57
id (dpkt.ip6.IP6FragmentHeader attribute), 33
hdrsum ([Link] attribute), 65
id ([Link] attribute), 37
header_type ([Link].QQ3Packet attribute), 46
id ([Link] attribute), 37
header_type ([Link].QQ5Packet attribute), 46
id ([Link] attribute), 42
header_type ([Link] attribute), 46
id ([Link] attribute), 49
headers ([Link] attribute), 22
identifier ([Link] attribute), 10
headers_str() (dpkt.ip6.IP6 method), 32
height ([Link] attribute), 50 IEEE80211 (class in dpkt.ieee80211), 25
[Link] (class in dpkt.ieee80211), 26
hello ([Link] attribute), 22
[Link] (class in dpkt.ieee80211), 28
hello ([Link] attribute), 63
IEEE80211.Assoc_Req (class in dpkt.ieee80211), 27
hexdump() (in module [Link]), 19
IEEE80211.Assoc_Resp (class in dpkt.ieee80211), 27
hl ([Link] attribute), 31
84

Index

dpkt, Release [Link]

[Link] (class in dpkt.ieee80211), 27

[Link] (class in dpkt.ieee80211), 27
[Link] (class in dpkt.ieee80211), 26
[Link]
(class
in
dpkt.ieee80211), 28
[Link]
(class
in
dpkt.ieee80211), 28
[Link] (class in dpkt.ieee80211), 26
[Link] (class in dpkt.ieee80211), 25
[Link] (class in dpkt.ieee80211), 30
[Link] (class in dpkt.ieee80211), 26
[Link] (class in dpkt.ieee80211), 26
[Link] (class in dpkt.ieee80211), 28
[Link] (class in dpkt.ieee80211), 28
[Link] (class in dpkt.ieee80211), 29
[Link] (class in dpkt.ieee80211), 29
[Link] (class in dpkt.ieee80211), 28
[Link] (class in dpkt.ieee80211), 27
[Link] (class in dpkt.ieee80211), 29
[Link] (class in dpkt.ieee80211), 29
[Link] (class in dpkt.ieee80211), 30
[Link] (class in dpkt.ieee80211), 29
IEEE80211.MGMT_Frame (class in dpkt.ieee80211), 26
IEEE80211.QoS_Data (class in dpkt.ieee80211), 29
IEEE80211.Reassoc_Req (class in dpkt.ieee80211), 27
[Link] (class in dpkt.ieee80211), 26
[Link] (class in dpkt.ieee80211), 30
IGMP (class in [Link]), 31
in_cksum() (in module [Link]), 19
in_cksum_add() (in module [Link]), 19
in_cksum_done() (in module [Link]), 19
in_encaps ([Link] attribute), 40
incl_len ([Link] attribute), 58
incremental ([Link] attribute), 50
index ([Link] attribute), 47
input_iface
([Link]
attribute), 38
input_iface
([Link]
attribute), 39
input_iface
([Link]
attribute), 40
input_iface
([Link]
attribute), 41
interval (dpkt.ieee80211.IEEE80211.Assoc_Req attribute), 27
interval ([Link] attribute),
27
interval
(dpkt.ieee80211.IEEE80211.Reassoc_Req
attribute), 27
interval ([Link] attribute), 42
intf ([Link].BGP4MPMessage attribute), 35
intf ([Link].BGP4MPMessage_32 attribute), 36

Index

IP (class in [Link]), 31
ip ([Link] attribute),
12
ip ([Link] attribute),
11
ip ([Link] attribute), 55
IP6 (class in dpkt.ip6), 32
IP6AHHeader (class in dpkt.ip6), 33
IP6DstOptsHeader (class in dpkt.ip6), 33
IP6ESPHeader (class in dpkt.ip6), 33
IP6ExtensionHeader (class in dpkt.ip6), 32
IP6FragmentHeader (class in dpkt.ip6), 33
IP6HopOptsHeader (class in dpkt.ip6), 32
IP6OptsHeader (class in dpkt.ip6), 32
IP6RoutingHeader (class in dpkt.ip6), 33
ip_proto ([Link] attribute), 38
ip_proto ([Link] attribute), 39
ip_proto ([Link] attribute), 40
ip_proto ([Link] attribute), 41
ip_to_str() (in module examples.print_packets), 3
IPX (class in [Link]), 34

K
key ([Link] attribute), 50
KeyEvent (class in [Link]), 50
KeypadButton (class in [Link]), 55

L
lamp_mode ([Link] attribute), 55
lba0 ([Link] attribute), 8
lba1 ([Link] attribute), 9
lba2 ([Link] attribute), 9
lba3 ([Link] attribute), 9
lba4 ([Link] attribute), 9
lba5 ([Link] attribute), 9
LEFileHdr (class in [Link]), 43
len ([Link] attribute), 7
len ([Link] attribute), 7
len ([Link] attribute), 13
len ([Link] attribute), 10
len ([Link] attribute),
10
len ([Link]
attribute), 11
len ([Link] attribute), 13
len ([Link].RouteIPV4 attribute), 13
len ([Link].RouteIPV6 attribute), 13
len ([Link] attribute), 14
len ([Link] attribute), 16
len ([Link] attribute), 16
85

dpkt, Release [Link]

len ([Link] attribute), 20

len ([Link] attribute), 21
len ([Link] attribute), 30
len ([Link] attribute), 30
len ([Link] attribute), 29
len ([Link] attribute), 30
len ([Link] attribute), 29
len ([Link] attribute), 30
len ([Link] attribute), 31
len (dpkt.ip6.IP6AHHeader attribute), 33
len (dpkt.ip6.IP6DstOptsHeader attribute), 33
len (dpkt.ip6.IP6HopOptsHeader attribute), 33
len (dpkt.ip6.IP6OptsHeader attribute), 32
len (dpkt.ip6.IP6RoutingHeader attribute), 33
len ([Link] attribute), 34
len ([Link] attribute), 35
len ([Link] attribute), 37
len ([Link] attribute), 37
len ([Link] attribute), 42
len ([Link] attribute), 43
len ([Link] attribute), 43
len ([Link] attribute), 45
len ([Link] attribute), 49
len ([Link] attribute), 56
len ([Link] attribute), 57
len ([Link].SSL2 attribute), 59
len ([Link] attribute), 64
len ([Link] attribute), 66
length ([Link] attribute), 48
length ([Link] attribute), 51
length ([Link] attribute), 61
length ([Link] attribute), 59
length ([Link] attribute), 65
length ([Link] attribute), 67
length ([Link] attribute), 67
length_bytes ([Link] attribute), 61
LEPktHdr (class in [Link]), 43
level ([Link] attribute), 60
li ([Link] attribute), 42
line_id ([Link] attribute), 55
line_instance ([Link] attribute), 54
line_instance ([Link] attribute), 54
line_instance ([Link] attribute), 54
line_instance ([Link] attribute), 54
line_instance ([Link] attribute),
55
linktype ([Link] attribute), 43
linktype ([Link] attribute), 43
linktype ([Link] attribute), 58
LLC (class in [Link]), 34
lock_qual_present ([Link] attribute), 47
loop() ([Link] method), 44
loop() ([Link] method), 59
Loopback (class in [Link]), 34

86

M
m ([Link] attribute), 53
m_flag (dpkt.ip6.IP6FragmentHeader attribute), 33
mac_addr() (in module examples.print_packets), 3
mac_size (dpkt.ssl_ciphersuites.CipherSuite attribute), 63
MAC_SIZES (dpkt.ssl_ciphersuites.CipherSuite attribute), 63
magic ([Link] attribute), 15
magic ([Link] attribute), 21
magic ([Link] attribute), 43
magic ([Link] attribute), 43
magic ([Link] attribute), 58
magic ([Link] attribute), 67
maj ([Link] attribute), 8
mandatory_flag ([Link] attribute), 16
marker ([Link] attribute), 13
max ([Link] attribute), 30
max_age ([Link] attribute), 63
max_frames_per_pkt ([Link]
attribute), 56
maxresp ([Link] attribute), 31
Message (class in [Link]), 22
method ([Link] attribute), 21
metric ([Link] attribute), 51
mf ([Link] attribute), 31
mid ([Link] attribute), 58
min ([Link] attribute), 8
mode ([Link] attribute), 42
more_data (dpkt.ieee80211.IEEE80211 attribute), 25
more_frag (dpkt.ieee80211.IEEE80211 attribute), 25
MRTHeader (class in [Link]), 35
ms_packet ([Link] attribute), 55
ms_packet ([Link] attribute),
56
msg ([Link] attribute), 56
msg ([Link].SSL2 attribute), 59
msg ([Link] attribute), 65
msg_timeout ([Link] attribute),
55
msgid ([Link] attribute), 56
mtime ([Link] attribute), 21
mtu ([Link] attribute), 23
mtu ([Link] attribute), 24
multi_tid ([Link] attribute), 26

N
name ([Link].Q attribute), 17
name ([Link] attribute), 17
name ([Link].Q attribute), 36
name ([Link] attribute), 36
NeedData, 18
Netflow1 (class in [Link]), 38
[Link] (class in [Link]), 38
Index

dpkt, Release [Link]

Netflow5 (class in [Link]), 38

[Link] (class in [Link]), 38
Netflow6 (class in [Link]), 39
[Link] (class in [Link]), 39
Netflow7 (class in [Link]), 40
[Link] (class in [Link]), 41
NetflowBase (class in [Link]), 37
[Link] (class in [Link]),
37
new_method() ([Link]
method), 15
next() ([Link] method), 44
next_hop ([Link] attribute), 38
next_hop ([Link] attribute), 39
next_hop ([Link] attribute), 40
next_hop ([Link] attribute), 41
next_hop ([Link] attribute), 51
nick1 ([Link] attribute), 67
nick2 ([Link] attribute), 67
node_to_service_name() (in module [Link]), 36
NS (class in [Link]), 36
ns ([Link] attribute), 18
ns ([Link] attribute), 37
NS.Q (class in [Link]), 36
[Link] (class in [Link]), 36
NTP (class in [Link]), 42
num_colours ([Link] attribute),
51
num_encodings ([Link] attribute), 50
num_rects ([Link] attribute), 50
nxt ([Link] attribute), 7
nxt (dpkt.ip6.IP6 attribute), 32
nxt (dpkt.ip6.IP6AHHeader attribute), 33
nxt (dpkt.ip6.IP6DstOptsHeader attribute), 33
nxt (dpkt.ip6.IP6FragmentHeader attribute), 33
nxt (dpkt.ip6.IP6HopOptsHeader attribute), 33
nxt (dpkt.ip6.IP6OptsHeader attribute), 32
nxt (dpkt.ip6.IP6RoutingHeader attribute), 33

op ([Link] attribute), 37
opcode ([Link] attribute), 16
opcode ([Link] attribute), 22
opcode ([Link] attribute), 65
OpenReceiveChannel (class in [Link]), 55
OpenReceiveChannelAck (class in [Link]), 55
opt_fields_fmts() ([Link] method), 20
optional ([Link] attribute), 11
opts ([Link] attribute), 15
opts ([Link] attribute), 31
opts ([Link] attribute), 64
order (dpkt.ieee80211.IEEE80211 attribute), 25
orig_called_party ([Link] attribute), 54
orig_called_party_name ([Link] attribute), 54
orig_len ([Link] attribute), 58
originate_time ([Link] attribute), 42
originated_ts ([Link] attribute), 35
os ([Link] attribute), 21
OSPF (class in [Link]), 42
out_encaps
([Link]
attribute), 40
output_iface ([Link] attribute), 38
output_iface ([Link] attribute), 39
output_iface ([Link] attribute), 40
output_iface ([Link] attribute), 41

p ([Link] attribute), 14
p ([Link] attribute), 20
p ([Link] attribute), 31
p ([Link] attribute), 45
p ([Link] attribute), 53
pack() ([Link] method), 19
pack_hdr() ([Link] method), 8
pack_hdr() ([Link] method), 16
pack_hdr() ([Link] method), 16
pack_hdr() ([Link] method), 19
pack_hdr() ([Link] method), 21
pack_hdr() ([Link] method), 22
O
pack_hdr() ([Link] method), 45
pack_name() ([Link] method), 36
off ([Link] attribute), 20
pack_name() (in module [Link]), 16
off ([Link] attribute), 31
pack_opts() ([Link] method), 15
off ([Link] attribute), 37
pack_q() ([Link] method), 18
off ([Link] attribute), 64
pack_rdata() ([Link] method), 17
offset ([Link] attribute), 31
old_method() ([Link] pack_rr() ([Link] method), 18
pack_xdrlist() (in module [Link]), 52
method), 15
PackError, 18
op ([Link] attribute), 9
Packet (class in [Link]), 18
op ([Link] attribute), 15
pad ([Link] attribute), 23
op ([Link] attribute), 18
Index

87

dpkt, Release [Link]

pad ([Link] attribute), 23

peer_nexthop ([Link] atpad ([Link] attribute), 24
tribute), 40
pad ([Link] attribute), 23
period ([Link] attribute), 30
pad ([Link] attribute), 24
period ([Link] attribute), 30
pad ([Link] attribute), 25
pid ([Link] attribute), 58
pad ([Link] attribute), 24
PIM (class in [Link]), 44
pad ([Link] attribute), 48
pixel_fmt ([Link] attribute), 50
pad ([Link] attribute), 51
PktHdr (class in [Link]), 43
pad ([Link] attribute), 50
PktHdr (class in [Link]), 58
pad ([Link] attribute), 50
pkts_sent ([Link] atpad ([Link] attribute), 51
tribute), 38
pad ([Link] attribute), 50
pkts_sent ([Link] atpad ([Link] attribute), 50
tribute), 39
pad ([Link] attribute), 58
pkts_sent ([Link] atpad ([Link].SSL2 attribute), 59
tribute), 40
pad1 ([Link] attribute), 24
pkts_sent ([Link] atpad1 ([Link] attribute), 38
tribute), 41
pad1 ([Link] attribute), 39 pktsum ([Link] attribute), 65
pad1 ([Link] attribute), 40 plen ([Link] attribute), 14
pad2 ([Link] attribute), 24
plen (dpkt.ip6.IP6 attribute), 32
pad2 ([Link] attribute), 38 pln ([Link] attribute), 9
pad2 ([Link] attribute), 39 Pmap (class in [Link]), 45
pad2 ([Link] attribute), 41 PointerEvent (class in [Link]), 50
pad3 ([Link] attribute), 38 port ([Link] attribute), 45
param_len ([Link] attribute), 10
port ([Link] attribute), 55
parameters ([Link]
port_id ([Link] attribute), 63
attribute), 28
PPP (class in [Link]), 45
parameters ([Link]
PPPoE (class in [Link]), 45
attribute), 28
precedence ([Link] attribute),
parse_attrs() (in module [Link]), 49
56
parse_attrs() (in module [Link]), 64
precision ([Link] attribute), 42
parse_body() (in module [Link]), 22
prefix ([Link] attribute), 35
parse_headers() (in module [Link]), 22
prefix_len ([Link] attribute), 35
parse_opts() (in module [Link]), 64
present_flags ([Link] attribute), 48
parse_variable_array() (in module [Link]), 59
print_packets() (in module examples.print_packets), 3
partial ([Link] attribute), 11
priority ([Link] attribute), 22
passthruparty_id
([Link] priority ([Link] attribute), 66
attribute), 54
pro ([Link] attribute), 9
passthruparty_id ([Link] at- proc ([Link] attribute), 52
tribute), 55
prog ([Link] attribute), 45
passthruparty_id ([Link] at- prog ([Link] attribute), 52
tribute), 55
prot ([Link] attribute), 45
passthruparty_id ([Link] at- protected_flag ([Link] attribute), 16
tribute), 56
proto (dpkt.h225.H225 attribute), 21
passthruparty_id ([Link] at- proto ([Link] attribute), 58
tribute), 56
proto_id ([Link] attribute), 63
pattern ([Link] attribute), 48
proxiable_flag ([Link] attribute), 16
payload_capability ([Link] at- pt ([Link] attribute), 34
tribute), 55
pt ([Link] attribute), 53
payload_capability ([Link] ptr ([Link] attribute), 24
attribute), 56
ptr ([Link] attribute), 25
peer_as ([Link] attribute), 35
ptype ([Link] attribute), 14
peer_ip ([Link] attribute), 35
pwr_mgt (dpkt.ieee80211.IEEE80211 attribute), 25

88

Index

dpkt, Release [Link]

request_flag ([Link] attribute), 15

res ([Link] attribute), 9
qd ([Link] attribute), 18
reserved
([Link]
atqd ([Link] attribute), 37
tribute),
38
QQ3Packet (class in [Link]), 46
reserved ([Link].Netflow5 attribute), 39
QQ5Packet (class in [Link]), 46
reserved ([Link].Netflow6 attribute), 40
QQBasicPacket (class in [Link]), 46
reserved ([Link].Netflow7 attribute), 41
qqNum ([Link].QQ5Packet attribute), 46
Response (class in [Link]), 23
qqNum ([Link] attribute), 46
Response (class in [Link]), 57
qr ([Link] attribute), 16
resv (dpkt.ip6.IP6AHHeader attribute), 33
resv (dpkt.ip6.IP6FragmentHeader attribute), 33
R
retransmit_flag ([Link] attribute), 16
ra ([Link] attribute), 17
retry (dpkt.ieee80211.IEEE80211 attribute), 25
Radiotap (class in [Link]), 47
rf ([Link] attribute), 31
[Link] (class in [Link]), 47
RFB (class in [Link]), 49
[Link] (class in [Link]), 47
RIP (class in [Link]), 51
[Link] (class in [Link]), 47
rlen ([Link] attribute), 17
[Link] (class in [Link]), 47
rlen ([Link] attribute), 36
[Link] (class in [Link]), 49
root_id ([Link] attribute), 63
[Link] (class in [Link]), 49
root_path ([Link] attribute), 64
[Link] (class in [Link]), 49
route_tag ([Link] attribute), 51
[Link] (class in [Link]), 48
RouteGeneric (class in [Link]), 13
[Link] (class in [Link]), 48
RouteIPV4 (class in [Link]), 13
[Link] (class in [Link]), 48
RouteIPV6 (class in [Link]), 13
[Link] (class in [Link]), 48
router ([Link] attribute), 42
[Link] (class in [Link]), 48
router_sc ([Link] [Link] (class in [Link]), 48
tribute), 41
[Link] (class in [Link]), 48
RPC
(class
in [Link]), 52
[Link] (class in [Link]), 48
[Link]
(class
in [Link]), 52
RADIUS (class in [Link]), 49
[Link]
(class
in
[Link]), 52
random ([Link] attribute), 60
[Link]
(class
in
[Link]), 52
random ([Link] attribute), 60
[Link]
(class
in [Link]), 52
rate_present ([Link] attribute), 47
[Link]
(class
in
[Link]), 52
rcode ([Link] attribute), 17
rpcvers
([Link]
attribute), 52
rd ([Link] attribute), 17
rsvd
([Link]
attribute),
7
rdata ([Link] attribute), 17
rsvd
([Link]
attribute), 13
rdata ([Link] attribute), 36
rsvd
([Link]
attribute),
22
Reader (class in [Link]), 44
rsvd ([Link] attribute), 44
Reader (class in [Link]), 59
rsvd ([Link] attribute), 51
readpkts() ([Link] method), 44
rsvd ([Link] attribute), 51
readpkts() ([Link] method), 59
reason ([Link] attribute), 28 rsvd ([Link] attribute), 56
reason ([Link] attribute), rsvd ([Link] attribute), 65
rsvd ([Link] attribute), 66
27
rsvd_sl_bits (dpkt.ip6.IP6RoutingHeader attribute), 33
rec_len ([Link] attribute), 58
RTE (class in [Link]), 51
receive_time ([Link] attribute), 42
RTP (class in [Link]), 53
recur ([Link] attribute), 20
Rx (class in [Link]), 53
ref_len (dpkt.h225.H225 attribute), 22
remote_ip ([Link] attribute), rx_flags_present ([Link] attribute), 47
56
remote_port ([Link] at- S
sa ([Link] attribute),
tribute), 56
29
reqid ([Link] attribute), 8
safi
([Link]
attribute), 13
Request (class in [Link]), 22
Request (class in [Link]), 57
Index

89

dpkt, Release [Link]

safi ([Link] attribute), 12

safi ([Link]
attribute), 12
SCCP (class in [Link]), 56
scnt ([Link] attribute), 9
scnt ([Link] attribute), 9
SCTP (class in [Link]), 57
secs ([Link] attribute), 15
security ([Link] attribute), 53
segs_left (dpkt.ip6.IP6RoutingHeader attribute), 33
SelectStartKeys (class in [Link]), 55
seq ([Link] attribute), 7
seq ([Link] attribute), 7
seq ([Link] attribute), 19
seq ([Link] attribute), 23
seq ([Link] attribute), 25
seq ([Link] attribute), 26
seq ([Link] attribute),
26
seq (dpkt.ip6.IP6AHHeader attribute), 33
seq (dpkt.ip6.IP6ESPHeader attribute), 34
seq ([Link] attribute), 35
seq ([Link] attribute), 53
seq ([Link] attribute), 53
seq ([Link] attribute), 64
sequence ([Link].QQ3Packet attribute), 46
sequence ([Link].QQ5Packet attribute), 46
sequence ([Link] attribute), 46
serial ([Link] attribute), 53
service ([Link] attribute), 53
service ([Link] attribute), 67
Session (class in [Link]), 37
session ([Link] attribute), 45
set ([Link] attribute), 48
set_aa() ([Link] method), 17
set_cmd() ([Link] class method), 8
set_opcode() ([Link] method), 17
set_p() ([Link] class method), 45
set_proto() ([Link] class method), 31
set_proto() (dpkt.ip6.IP6 class method), 32
set_qr() ([Link] method), 17
set_ra() ([Link] method), 17
set_rcode() ([Link] method), 17
set_rd() ([Link] method), 17
set_recur() ([Link] method), 20
set_type() ([Link] class method), 20
set_v() ([Link] method), 20
set_zero() ([Link] method), 17
SetColourMapEntries (class in [Link]), 50
SetEncodings (class in [Link]), 50
setfilter() ([Link] method), 44
setfilter() ([Link] method), 59
SetLamp (class in [Link]), 55

90

SetPixelFormat (class in [Link]), 50

SetSpeakerMode (class in [Link]), 56
setup_class() ([Link] class method), 62
setup_class() ([Link] class method), 62
setup_class() ([Link] class
method), 62
setup_class() ([Link] class method),
62
setup_class()
([Link]
class
method), 63
setup_class() ([Link] class method), 61
sha ([Link] attribute), 9
siaddr ([Link] attribute), 15
sigfigs ([Link] attribute), 43
sigfigs ([Link] attribute), 43
silence_suppression ([Link]
attribute), 56
sl_bits (dpkt.ip6.IP6RoutingHeader attribute), 33
SLL (class in [Link]), 57
SMB (class in [Link]), 58
SNAC (class in [Link]), 8
sname ([Link] attribute), 15
snaplen ([Link] attribute), 43
snaplen ([Link] attribute), 44
softkey_map ([Link] attribute), 55
softkey_set ([Link] attribute), 55
source ([Link].QQ3Packet attribute), 46
source ([Link].QQ5Packet attribute), 46
source ([Link] attribute), 46
spa ([Link] attribute), 9
speaker ([Link] attribute), 56
spi ([Link] attribute), 7
spi ([Link] attribute), 19
spi (dpkt.ip6.IP6AHHeader attribute), 33
spi (dpkt.ip6.IP6ESPHeader attribute), 34
sport ([Link] attribute), 37
sport ([Link] attribute), 57
sport ([Link] attribute), 64
sport ([Link] attribute), 66
src ([Link] attribute), 20
src ([Link] attribute), 26
src ([Link] attribute),
26
src ([Link] attribute), 26
src ([Link] attribute), 28
src ([Link] attribute),
28
src ([Link] attribute),
29
src ([Link] attribute), 29
src (dpkt.ieee80211.IEEE80211.MGMT_Frame attribute), 27
src ([Link] attribute), 26
src ([Link] attribute), 31

Index

dpkt, Release [Link]

src (dpkt.ip6.IP6 attribute), 32

stat ([Link] attribute), 52
src ([Link] attribute), 34
state ([Link] attribute), 22
src ([Link] attribute), 37
status
(dpkt.ieee80211.IEEE80211.Assoc_Resp
atsrc_addr ([Link] attribute), 27
tribute), 38
status ([Link] attribute), 35
src_addr ([Link] at- status ([Link] attribute), 53
tribute), 39
status_code ([Link]
src_addr ([Link] atattribute), 28
tribute), 40
stimulus ([Link] attribute), 55
src_addr ([Link] at- stimulus_instance ([Link] attribute), 56
tribute), 41
StopMediaTransmission (class in [Link]), 56
src_as ([Link].BGP4MPMessage attribute), 35
STP (class in [Link]), 63
src_as ([Link].BGP4MPMessage_32 attribute), 36
stratum ([Link] attribute), 42
src_as ([Link] attribute), strip_options() (in module [Link]), 65
39
STUN (class in [Link]), 64
src_as ([Link] attribute), subcode ([Link] attribute), 13
40
subnet ([Link] attribute), 51
src_as ([Link] attribute), subtype ([Link] attribute), 8
41
subtype (dpkt.ieee80211.IEEE80211 attribute), 25
src_ip ([Link].BGP4MPMessage attribute), 35
subtype ([Link] attribute), 35
src_ip ([Link].BGP4MPMessage_32 attribute), 36
sum ([Link] attribute), 14
src_mask ([Link] at- sum ([Link] attribute), 24
tribute), 39
sum (dpkt.icmp6.ICMP6 attribute), 25
src_mask ([Link] at- sum ([Link] attribute), 31
tribute), 40
sum ([Link] attribute), 31
src_mask ([Link] at- sum ([Link] attribute), 34
tribute), 41
sum ([Link] attribute), 42
src_port
([Link]
at- sum ([Link] attribute), 45
tribute), 38
sum ([Link] attribute), 53
src_port
([Link]
at- sum ([Link] attribute), 57
tribute), 39
sum ([Link] attribute), 64
src_port
([Link]
at- sum ([Link] attribute), 66
tribute), 40
sum ([Link] attribute), 66
src_port
([Link]
at- sys_uptime ([Link].Netflow1 attribute), 38
tribute), 41
sys_uptime ([Link].Netflow5 attribute), 39
sre ([Link] attribute), 20
sys_uptime ([Link].Netflow6 attribute), 40
SSL2 (class in [Link]), 59
sys_uptime ([Link].Netflow7 attribute), 41
SSL3Exception, 59
sys_uptime ([Link] attribute), 37
SSLFactory (class in [Link]), 61
T
ssrc ([Link] attribute), 53
start_time ([Link] at- TableDump (class in [Link]), 35
tribute), 38
tag ([Link] attribute), 8
start_time ([Link] at- tc ([Link] attribute), 34
tribute), 39
TCP (class in [Link]), 64
start_time ([Link] at- tcp_flags ([Link] attribute), 40
tribute), 38
start_time ([Link] at- tcp_flags ([Link] attribute), 41
tribute), 39
starting_seq ([Link]
tcp_flags ([Link] atattribute), 28
tribute), 40
StartMediaTransmission (class in [Link]), 56
tcp_flags ([Link] atStartTone (class in [Link]), 56
tribute), 41
stat ([Link] attribute), 52
test() (in module examples.print_packets), 4
stat ([Link] attribute), 52
test_80211_beacon() (in module dpkt.ieee80211), 30
Index

91

dpkt, Release [Link]

test_80211_data() (in module dpkt.ieee80211), 30

test_80211_data_qos() (in module dpkt.ieee80211), 30
test_802211_ack() (in module dpkt.ieee80211), 30
test_action_block_ack_request()
(in
module
dpkt.ieee80211), 30
test_action_block_ack_response()
(in
module
dpkt.ieee80211), 31
test_aoeata() (in module [Link]), 9
test_aoecfg() (in module [Link]), 9
test_asn1() (in module dpkt.asn1), 10
test_basic() (in module [Link]), 18
test_body_forbidden_response() (in module [Link]),
23
test_bug() (in module dpkt.ieee80211), 30
test_bytes_parsed()
([Link]
method), 63
test_chunked_response() (in module [Link]), 23
test_cipher_suite() ([Link] method), 62
test_cipher_suite_length()
([Link]
method), 62
test_client_hello_constructed() ([Link]
method), 62
test_client_random_correct() ([Link]
method), 62
test_compressed_block_ack()
(in
module
dpkt.ieee80211), 30
test_compression_methods()
([Link]
method), 62
test_constructed() ([Link] method), 62
test_constuctor() (in module [Link]), 32
test_content_type() ([Link] method), 61
test_created_inside_message()
([Link] method), 62
test_data() ([Link] method), 61
test_data_ds() (in module dpkt.ieee80211), 30
test_deprecated_decorator()
([Link]
method), 15
test_deprecated_method_performance() (in module
[Link]), 18
test_deprecated_methods() (in module [Link]), 18
test_dhcp() (in module [Link]), 15
test_eth() (in module [Link]), 20
test_fcs() (in module [Link]), 49
test_first_msg_data()
([Link]
method), 63
test_format_request() (in module [Link]), 23
test_frag() (in module [Link]), 32
test_hl() (in module [Link]), 32
test_icmp() (in module [Link]), 24
test_initial_flags() ([Link] method), 61
test_invalid_header() (in module [Link]), 23
test_ip() (in module [Link]), 32
test_ip6_ah_header() (in module dpkt.ip6), 34

92

test_ip6_esp_header() (in module dpkt.ip6), 34

test_ip6_extension_headers() (in module dpkt.ip6), 34
test_ip6_fragment_header() (in module dpkt.ip6), 34
test_ip6_options_header() (in module dpkt.ip6), 34
test_ip6_routing_header() (in module dpkt.ip6), 34
test_ipg() (in module dpkt.ip6), 34
test_length() ([Link] method), 62
test_length() ([Link] method), 61
test_llc() (in module [Link]), 34
test_multicookie_response() (in module [Link]), 23
test_net_flow_v1_pack() (in module [Link]), 41
test_net_flow_v1_unpack() (in module [Link]), 41
test_net_flow_v5_pack() (in module [Link]), 42
test_net_flow_v5_unpack() (in module [Link]), 42
test_noreason_response() (in module [Link]), 23
test_ntp_pack() (in module [Link]), 42
test_ntp_unpack() (in module [Link]), 42
test_num_messages()
([Link]
method), 63
test_op_data() (in module [Link]), 65
test_op_err() (in module [Link]), 65
test_op_rrq() (in module [Link]), 65
test_OPT() (in module [Link]), 18
test_opt() (in module [Link]), 32
test_pack() (in module [Link]), 13
test_pack() (in module [Link]), 16
test_pack() (in module dpkt.h225), 22
test_pack_name() (in module [Link]), 18
test_parse_opts() (in module [Link]), 65
test_parse_request() (in module [Link]), 23
test_parses()
([Link]
method), 62
test_pcap_endian() (in module [Link]), 44
test_PTR() (in module [Link]), 18
test_Radiotap() (in module [Link]), 49
test_raises_need_data()
([Link]
method), 62
test_raises_need_data_when_buf_is_short()
([Link] method), 62
test_random_correct() ([Link] method),
62
test_reader() (in module [Link]), 44
test_repack() ([Link] method), 62
test_request_version() (in module [Link]), 23
test_rtp_pack() (in module [Link]), 51
test_rtp_unpack() (in module [Link]), 51
test_sctp_pack() (in module [Link]), 57
test_sctp_unpack() (in module [Link]), 57
test_second_msg_data() ([Link]
method), 63
test_session_id() ([Link] method), 62
test_stp() (in module [Link]), 64
test_stun_response() (in module [Link]), 64
test_telnet() (in module [Link]), 65

Index

dpkt, Release [Link]

test_tns() (in module [Link]), 65

tone ([Link] attribute), 56
test_total_length() ([Link] method), 62 tos ([Link] attribute), 31
test_total_length() ([Link] method), 62 tos ([Link] attribute), 38
test_total_length() ([Link] tos ([Link] attribute), 39
method), 62
tos ([Link] attribute), 40
test_total_length() ([Link] method), 62 tos ([Link] attribute), 41
test_unpack() (in module [Link]), 13
tpa ([Link] attribute), 9
test_unpack() (in module [Link]), 16
TPKT (class in [Link]), 66
test_unpack() (in module dpkt.h225), 22
transitive ([Link] attribute), 11
test_value() ([Link] method), 62
transmit_time ([Link] attribute), 42
test_version() ([Link] method), 61
ts ([Link] attribute), 35
test_vrrp() (in module [Link]), 66
ts ([Link] attribute), 53
test_zerolen() (in module [Link]), 32
ts_sec ([Link] attribute), 58
TestClientHello (class in [Link]), 62
ts_usec ([Link] attribute), 58
TestDeprecatedDecorator (class in [Link]), 14
tsft_present ([Link] attribute), 47
TestServerHello (class in [Link]), 62
ttl ([Link] attribute), 14
TestTLSAppData (class in [Link]), 62
ttl ([Link] attribute), 17
TestTLSChangeCipherSpec (class in [Link]), 62
ttl ([Link] attribute), 31
TestTLSHandshake (class in [Link]), 62
ttl ([Link] attribute), 36
TestTLSMultiFactory (class in [Link]), 63
tu ([Link] attribute), 29
TestTLSRecord (class in [Link]), 61
tv_sec ([Link] attribute), 43
TFTP (class in [Link]), 65
tv_sec ([Link] attribute), 43
tha ([Link] attribute), 9
tv_usec ([Link] attribute), 43
thiszone ([Link] attribute), 43
tv_usec ([Link] attribute), 43
thiszone ([Link] attribute), 44
tx_attn_present ([Link] attribute), 47
tid ([Link] attribute), 26
type ([Link] attribute), 8
tid ([Link] attribute), 58
type ([Link] attribute), 13
timeout ([Link]
type ([Link] attribute), 10
attribute), 28
type ([Link] attribute), 13
timeout ([Link]
type ([Link]
attribute), 28
attribute), 11
timestamp
([Link]
at- type ([Link] attribute), 11
tribute), 27
type ([Link] attribute), 14
tls_multi_factory() (in module [Link]), 61
type ([Link].Q attribute), 17
TLSAlert (class in [Link]), 60
type ([Link] attribute), 17
TLSAppData (class in [Link]), 60
type ([Link] attribute), 20
TLSCertificate (in module [Link]), 60
type ([Link] attribute), 21
TLSCertificateRequest (in module [Link]), 60
type ([Link] attribute), 24
TLSCertificateVerify (in module [Link]), 61
type (dpkt.icmp6.ICMP6 attribute), 25
TLSChangeCipherSpec (class in [Link]), 60
type (dpkt.ieee80211.IEEE80211 attribute), 25
TLSClientHello (class in [Link]), 60
type ([Link] attribute), 31
TLSClientKeyExchange (in module [Link]), 61
type (dpkt.ip6.IP6RoutingHeader attribute), 33
TLSFinished (in module [Link]), 61
type ([Link] attribute), 35
TLSHandshake (class in [Link]), 61
type ([Link] attribute), 37
TLSHelloRequest (class in [Link]), 60
type ([Link].Q attribute), 36
TLSRecord (class in [Link]), 59
type ([Link] attribute), 36
TLSServerHello (class in [Link]), 60
type ([Link] attribute), 37
TLSServerHelloDone (in module [Link]), 61
type ([Link] attribute), 43
TLSServerKeyExchange (in module [Link]), 60
type ([Link] attribute), 44
TLSUnknownHandshake (class in [Link]), 60
type ([Link] attribute), 45
tlv() (in module [Link]), 8
type ([Link] attribute), 49
tlv() (in module [Link]), 64
type ([Link] attribute), 51
TNS (class in [Link]), 65
type ([Link] attribute), 53
to_ds (dpkt.ieee80211.IEEE80211 attribute), 25
type ([Link] attribute), 57

Index

93

dpkt, Release [Link]

type ([Link] attribute), 58

type ([Link] attribute), 60
type ([Link] attribute), 61
type ([Link] attribute), 60
type ([Link] attribute), 64
type ([Link] attribute), 64
type ([Link] attribute), 65
type ([Link] attribute), 66
type ([Link] attribute), 67
type ([Link] attribute), 67

([Link]
method), 11
unpack() ([Link]
method), 11
unpack() ([Link]
method), 11
unpack()
([Link]
method), 12
unpack() ([Link]
method), 12
unpack() ([Link]
U
method), 12
unpack() ([Link]
UDP (class in [Link]), 66
method), 12
uid ([Link] attribute), 58
unpack() ([Link]
ulen ([Link] attribute), 66
method), 12
unix_nsec ([Link].Netflow1 attribute), 38
unpack() ([Link] method), 13
unix_nsec ([Link].Netflow5 attribute), 39
unpack() ([Link].RouteIPV4 method), 13
unix_nsec ([Link].Netflow6 attribute), 40
unpack() ([Link].RouteIPV6 method), 13
unix_nsec ([Link].Netflow7 attribute), 41
unpack() ([Link] method), 14
unix_nsec ([Link] attribute), 37
unpack() ([Link] method), 14
unix_sec ([Link].Netflow1 attribute), 38
unpack() ([Link] method), 14
unix_sec ([Link].Netflow5 attribute), 39
unpack() ([Link] method), 15
unix_sec ([Link].Netflow6 attribute), 40
unpack() ([Link] method), 16
unix_sec ([Link].Netflow7 attribute), 41
unpack() ([Link] method), 16
unix_sec ([Link] attribute), 37
unpack() ([Link] method), 18
unknown ([Link].QQ5Packet attribute), 46
unpack() ([Link].Q method), 17
unknown ([Link] attribute), 67
unpack() ([Link] method), 19
unknown1 ([Link].QQ3Packet attribute), 46
unpack() ([Link] method), 19
unknown1 ([Link] attribute), 67
unpack() ([Link] method), 20
unknown10 ([Link].QQ3Packet attribute), 46
unpack() ([Link] method), 20
unknown11 ([Link].QQ3Packet attribute), 46
unpack() ([Link] method), 20
unknown12 ([Link].QQ3Packet attribute), 46
unpack() ([Link] method), 21
unknown13 ([Link].QQ3Packet attribute), 46
unpack() (dpkt.h225.H225 method), 21
unknown2 ([Link].QQ3Packet attribute), 46
unpack() ([Link] method), 21
unknown2 ([Link] attribute), 67
unpack() ([Link] method), 22
unknown3 ([Link].QQ3Packet attribute), 46
unpack() ([Link] method), 22
unknown4 ([Link].QQ3Packet attribute), 46
unpack() ([Link] method), 23
unknown5 ([Link].QQ3Packet attribute), 46
unpack() ([Link] method), 24
unknown6 ([Link].QQ3Packet attribute), 46
unpack() ([Link] method), 23
unknown7 ([Link].QQ3Packet attribute), 46
unpack() (dpkt.icmp6.ICMP6 method), 25
unknown8 ([Link].QQ3Packet attribute), 46
unpack() ([Link] method), 24
unknown9 ([Link].QQ3Packet attribute), 46
unpack() (dpkt.ieee80211.IEEE80211 method), 25
unpack() ([Link] method), 7
unpack() ([Link] method),
unpack() ([Link] method), 7
28
unpack() ([Link] method), 8
unpack()
([Link]
unpack() ([Link] method), 10
method),
26
unpack() ([Link] method), 13
unpack()
([Link]
method), 29
unpack() ([Link] method), 13
unpack()
([Link]
method), 30
unpack() ([Link] method), 10
unpack()
([Link]
method),
31
unpack() ([Link] method), 10
unpack()
([Link] unpack() (dpkt.ip6.IP6 method), 32
unpack() (dpkt.ip6.IP6AHHeader method), 33
method), 10
unpack() (dpkt.ip6.IP6ESPHeader method), 33
unpack() ([Link] method), 11
unpack() (dpkt.ip6.IP6FragmentHeader method), 33
unpack() ([Link] method), 11
94

unpack()

Index

dpkt, Release [Link]

unpack() (dpkt.ip6.IP6OptsHeader method), 32

unpack() (dpkt.ip6.IP6RoutingHeader method), 33
unpack() ([Link] method), 34
unpack() ([Link] method), 34
unpack() ([Link] method), 35
unpack() ([Link] method), 37
unpack() ([Link]
method), 37
unpack() ([Link] method), 45
unpack() ([Link] method), 45
unpack() ([Link] method), 47
unpack() ([Link] method), 49
unpack() ([Link] method), 51
unpack() ([Link] method), 52
unpack() ([Link] method), 52
unpack() ([Link] method), 52
unpack() ([Link] method), 52
unpack() ([Link] method), 52
unpack() ([Link] method), 52
unpack() ([Link] method), 53
unpack() ([Link] method), 56
unpack() ([Link] method), 57
unpack() ([Link] method), 57
unpack() ([Link] method), 57
unpack() ([Link].SSL2 method), 59
unpack() ([Link] method), 60
unpack() ([Link] method), 61
unpack() ([Link] method), 59
unpack() ([Link] method), 60
unpack() ([Link] method), 64
unpack() ([Link] method), 65
unpack() ([Link] method), 65
unpack() ([Link] method), 66
unpack_ies() (dpkt.ieee80211.IEEE80211 method), 25
unpack_name() ([Link] method), 36
unpack_name() (in module [Link]), 16
unpack_q() ([Link] method), 18
unpack_rdata() ([Link] method), 17
unpack_rdata() ([Link] method), 36
unpack_rr() ([Link] method), 18
unpack_xdrlist() (in module [Link]), 52
UnpackError, 18
update_time ([Link] attribute), 42
urp ([Link] attribute), 64
usecs ([Link] attribute), 48
utctime() (in module dpkt.asn1), 10

V
v ([Link] attribute), 10
v ([Link] attribute), 16
v ([Link] attribute), 19
v ([Link] attribute), 20
v ([Link] attribute), 31
v (dpkt.ip6.IP6 attribute), 32
Index

v ([Link] attribute), 42
v ([Link] attribute), 43
v ([Link] attribute), 44
v ([Link] attribute), 45
v ([Link] attribute), 51
v ([Link] attribute), 59
v ([Link] attribute), 64
v ([Link] attribute), 66
v ([Link] attribute), 66
v_major ([Link] attribute), 43
v_major ([Link] attribute), 44
v_minor ([Link] attribute), 43
v_minor ([Link] attribute), 44
val ([Link] attribute), 48
val ([Link] attribute), 48
val ([Link] attribute), 48
val ([Link] attribute), 48
val ([Link] attribute), 48
value ([Link]
attribute), 12
value ([Link]
attribute), 12
value ([Link] attribute), 11
value ([Link] attribute), 11
value ([Link] attribute), 12
vendor_flag ([Link] attribute), 16
ver ([Link] attribute), 8
ver_fl ([Link] attribute), 8
vers ([Link] attribute), 45
vers ([Link] attribute), 52
version ([Link] attribute), 14
version ([Link] attribute), 22
version (dpkt.ieee80211.IEEE80211 attribute), 25
version ([Link].Netflow1 attribute), 38
version ([Link].Netflow5 attribute), 39
version ([Link].Netflow6 attribute), 40
version ([Link].Netflow7 attribute), 41
version ([Link] attribute), 38
version ([Link] attribute), 48
version ([Link] attribute), 53
version ([Link] attribute), 60
version ([Link] attribute), 60
version ([Link] attribute), 60
version ([Link] attribute), 67
version ([Link] attribute), 67
view ([Link] attribute), 35
vip ([Link] attribute), 22
vrid ([Link] attribute), 66
VRRP (class in [Link]), 66
vtag ([Link] attribute), 57

95

dpkt, Release [Link]

W
wep (dpkt.ieee80211.IEEE80211 attribute), 25
width ([Link] attribute), 50
win ([Link] attribute), 64
writepkt() ([Link] method), 44
writepkt() ([Link] method), 59
Writer (class in [Link]), 44
Writer (class in [Link]), 59

X
x ([Link] attribute), 53
x_position ([Link]
tribute), 50
x_position ([Link] attribute), 50
xflags ([Link] attribute), 21
xid ([Link] attribute), 15
xid ([Link] attribute), 52
xid ([Link] attribute), 64

at-

Y
y_position ([Link]
tribute), 50
y_position ([Link] attribute), 50
YHOO (class in [Link]), 67
yiaddr ([Link] attribute), 15
YMSG (class in [Link]), 67

at-

Z
zero ([Link] attribute), 17

96

Index