Parsing Packets with House

Dominic Steinitz dominic.steinitz at blueyonder.co.uk
Sat May 27 14:58:46 EDT 2006


Now that I have the Haskell libpcap binding working, I want to be able to 
parse the packets that I capture. How feasible would it be to use the modules 
in House (programatica/hOp/kernel/Net) standalone?

For example, here is a capture of a packet showing the 14-byte ethernet header 
followed by the IP packet which in this case is an ICMP echo request. I 
assume I can somehow use Net.Ethernet, Net.IPv4 and Net.ICMP to parse the 
packet?

Dominic.

[0,16,220,204,93,240,0,48,5,177,121,178,8,0,
69,0,0,84,104,184,0,0,255,1,9,54,192,168,100,55,192,168,100,50,
8,0,136,151,164,247,0,0,
68,120,161,81,
0,0,249,163,8,9,10,11,12,13,14,15,16,17,18,19,
20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,
36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,
52,53,54,55]




More information about the Libraries mailing list