Development build jnetpcap-1.3.b0003 is available for download. This is the latest snapshot of the main development trunk. It looks stable on all the platforms tested.
Key updates:
- Sip, Sdp, Rtp, Arp, Rip, SLL protocols are all now CORE protocols.
- Protocol heuristics (bindings are guessed based on evaluation of raw header data for matches against protocols.)
- Low level header-state-structure has been expanded to take into account a header prefix, the header itself, a gap between header and payload, payload length and a postfix.
- Packet truncation is now also applied at low level to scanner and appropriate packet and header specific flags are set to indicate packet fragments and/or truncated packets.
- Checksum calculation class and package is provided. Checksum validation is supported through a new interface JHeaderChecksum which is implemented by Ip4, Tcp, Udp, Icmp headers.
- a number of bug fixes in protocols and analyzers.
You can download the build package for MsWindows, Linux and Debian from sourceforge.net file release system:
https://sourceforge.net/project/showfiles.php?group_id=164277&package_id...
Very nice work
Hi Mark,
Congratulations for your great wrapper ! I'm currently using it for a projet based on a network sniffer, and this library is very useful and easy to handle !
I was on the way to add my custom header for the ARP Protocol, but it seems that it is now a part from jnetpcap ! great !
However, I tried to use it for checking some packets received with the live capture, but it does not seem to work. Here is the way I followed :
- Create an empty Arp Object
- Use of the hasHeader(myArpObject) method to check if the packet contains it
- Put a simple "System.out.println" method inside it for displaying a field
(This is exactly what I did for other types like Ethernet or IP4 ..)
I cleared the arp table on my computer and tried to ping another machine (which should generate ARP requests) and nothing happened.
Many thanks for your help !
R.
Sometimes machines can't see
Sometimes machines can't see their own packets they send out. I just ran the jUnit Arp testcase to make sure that the test scenerio works in 1.3.b0003 and it does:
public void testArp() { JPacket packet = super.getPcapPacket(VLAN, 189 - 1); assertTrue(packet.hasHeader(JProtocol.ARP_ID)); Arp arp = new Arp(); assertTrue(packet.hasHeader(arp)); assertEquals(Arp.OpCode.REQUEST, arp.operationEnum()); }Testcase passes so we get a valid Arp packet. Start up a discussion under support forum, if you still have problems with Arp.
Sly Technologies, Inc.
R&D
Thank you
My AnalyzerListener is working now with that release.