Parsing DNS section from Etheral capture

[syndal]

hi all,
i am currently working on files in c.i am using ethereal to capture the packet and have got a binary file.now i need to extract only certain datas from tht binary file.file contains http,dns,pop3 datas.i need to take only the dns data.thanks in advance.plz help me out.

[gpraghuram]

hi all,
i am currently working on files in c.i am using ethereal to capture the packet and have got a binary file.now i need to extract only certain datas from tht binary file.file contains http,dns,pop3 datas.i need to take only the dns data.thanks in advance.plz help me out.

If you know the structure then try to use fread.
How the data is organized?
Can you give me more inputs and also tell us what have you tried on this

Raghuram

[syndal]

If you know the structure then try to use fread.
How the data is organized?
Can you give me more inputs and also tell us what have you tried on this

Raghuram

i know the structure of ethereal.now i am pasting my code.now i nhave a file eq.txt which has the output in binary.need to convert it to readble form.plz help with ur ideas
#include<stdio.h>
#include<conio.h>

main()
{
FILE *fp,*ft;
char ch;
int i;
clrscr();
fp=fopen("test2.cap","rb");
ft=fopen("e1.txt","wb");
fseek(fp,0,SEEK_SET);
printf("The start position of fp:%ld",ftell(fp));
for(i=0;i<=32;i++)
{
ch=fgetc(fp);
fputc(ch,ft);
}
printf("\nThe end position of fp :%ld",ftell(fp));
fclose(fp);
fclose(ft);
}

[sicarie]

So do you know what the binary returned there represents?

[syndal]

So do you know what the binary returned there represents?

ya i am trying with tht.i am converting the integer values in the binary to readable.but not able to do it for text.can u help

[sicarie]

You need to figure out what each section represents, and how they are translated by Wireshark(Ethereal). Once you figure out what they are supposed to represent, you can figure out how they are translated and mimick that. (ie, are they ASCII values?)

[syndal]

thanx for the reply.i have done with tht part and now in the next part.
thanx again