Receiving Custom Protocol Packets With Scapy and NetFilter Queue

Question

I am doing a project that involves shimming a packet with a custom layer containing some specific fields. I managed to do this using the guide here:

The guide is great on how to build and send packets with custom layers, but not so much on how to receive them.

I have a packet with the form:

IP()/CustomLayer()/ICMP()

And I am sending this packet to another host that will receive the packet using python's netfilter queue and scapy libraries.

My question is, how do I receive an incoming packet with custom layers in it and still have access to the fields? Trying to parse the packet with

IP(packet)

seems to not be working.. Any help is greatly appreciated!

Community · Accepted Answer · 2017-05-23 12:19:26Z

3

Have you tried to declare an empty packet first?

pkt = IP()/CustomLayer()/ICMP()

and then

pkt = IP(packet)

Look here and you may find the solution to your problem: Extract Scapy Custom layer

CommunityBot

11 silver badge

answered Nov 16, 2015 at 20:47

rebrid

4409 silver badges29 bronze badges

Sign up to request clarification or add additional context in comments.

1 Answer 1