Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rdpcap + wrpcap rebuilds and corrupts LDAP packets #4615

Open
alexey-at-work-bc opened this issue Dec 18, 2024 · 0 comments
Open

rdpcap + wrpcap rebuilds and corrupts LDAP packets #4615

alexey-at-work-bc opened this issue Dec 18, 2024 · 0 comments

Comments

@alexey-at-work-bc
Copy link

Brief description

I would expect scapy.all.wrpcap(r"out.pcap", scapy.all.rdpcap(r"in.pcap")) to produce a copy of the input PCAP with packets identical to the packets in the input PCAP. Instead, LDAP packets are rebuilt, app layer data is modified (because of different ASN1_default_long_size) while lower layer data (IP length, checksums, etc.) is not modified accordingly producing invalid packets.

pcap.zip

scapy.all.Conf.layers.filter([]) fixes this problem.

Scapy version

2.6.0

Python version

Python 3.13.0 (tags/v3.13.0:60403a5, Oct 7 2024, 09:38:07) [MSC v.1941 64 bit (AMD64)] on win32

Operating system

Windows 11 Pro 23H2 (10.0.22631.4460)

Additional environment information

No response

How to reproduce

see description

Actual result

No response

Expected result

No response

Related resources

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant