[Tutor] ICMP checksum

Kent Johnson kent37 at tds.net
Tue Sep 27 16:37:51 CEST 2005


the taloner wrote:
> Hi list,
> 
> I was just playing  around with one of the examples given in Python 
> cook-book. This examples show you how to send data using ICMP packets.
> http://aspn.activestate.com/ASPN/Cookbook/Python/Recipe/439224
> 
> While running the script I encountered a problem which was with the 
> statement
> 
> icmp.set_icmp_cksum(0)
> 
> The error encountered was
> 
> Traceback (most recent call last):
>   File "icmpdata.py", line 38, in ?
>     icmp.set_icmp_chksum(0)
> AttributeError: ICMP instance has no attribute 'set_icmp_chksum'

This recipe uses a package called impacket which is available from
http://oss.coresecurity.com/projects/impacket.html

Looking at the implementation of ICMP in the latest release of ImpactPacket.py, the correct spelling of the method is 'set_icmp_cksum'

Kent

> 
> 
> So I did the next logical thing, commented the line in code (which 
> appears twice). Script ran smoothly and I captured the traffic using 
> tcpdump.
> When the script sends first 54 bytes everything is good. When I send a 
> longer data string, and the script is forced to split the data over 
> multiple packets I start fasing a problem with checksum.

That shouldn't be too surprising if you commented out the line that sets the checksum!

> 
> 17:36:36.198543 IP (tos 0x0, ttl 255, id 16951, offset 0, flags [none], 
> length: 82) 192.168.3.37 <http://192.168.3.37> > 192.168.3.36 
> <http://192.168.3.36>: icmp 62: echo reply seq 0
>         0x0000:  0002 3fb9 17fe 000c 299c e8a5 0800 4500  ..?.....).....E.
>         0x0010:  0052 4237 0000 ff01 f1d9 c0a8 0325 c0a8  .RB7.........%..
>         0x0020:  0324 0000 bab9 0001 0000 6161 6161 6161  .$........aaaaaa
>         0x0030:  6161 6161 6161 6161 6161 6161 6161 6161  aaaaaaaaaaaaaaaa
>         0x0040:  6161 6161 6161 6161 6161 6161 6161 6161  aaaaaaaaaaaaaaaa
>         0x0050:  6161 6161 6161 6161 6161 6161 6161 6161  aaaaaaaaaaaaaaaa
> 17:36:37.198470 IP (tos 0x0, ttl 255, id 16952, offset 0, flags [none], 
> length: 82) 192.168.3.37 <http://192.168.3.37> > 192.168.3.36 
> <http://192.168.3.36>: icmp 62: echo reply seq 0 (wrong icmp cksum bab9 
> (->bab8)!)
>         0x0000:  0002 3fb9 17fe 000c 299c e8a5 0800 4500  ..?.....).....E.
>         0x0010:  0052 4238 0000 ff01 f1d8 c0a8 0325 c0a8  .RB8.........%..
>         0x0020:  0324 0000 bab9 0002 0000 6161 6161 6161  .$........aaaaaa
>         0x0030:  6161 6161 6161 6161 6161 6161 6161 6161  aaaaaaaaaaaaaaaa
>         0x0040:  6161 6161 6161 6161 6161 6161 6161 6161  aaaaaaaaaaaaaaaa
>         0x0050:  6161 6161 6161 6161 6161 6161 6161 6161  aaaaaaaaaaaaaaaa
> 
> Also as you can see that seq is not increasing as ideally it should have 
> been as directed by this line:
> 
> seq_id = seq_id + 1
> 
> Can someone give some light on these issues?
> 
> Thanks
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Tutor maillist  -  Tutor at python.org
> http://mail.python.org/mailman/listinfo/tutor



More information about the Tutor mailing list