Sniffer with RAW SOCKETS

[billiejoex]

Hi all. I'm trying to make a simple icmp sniffer by using SOCK_RAW.
The code below works but ONLY if I first use the sendto() function.
Does anybody knows why?
Regards

from socket import *
import select
def recv():
while 1:
if s in select.select([s],[],[],99)[0]:
reply = s.recvfrom(2000)[0]
print reply
s = socket(AF_INET, SOCK_RAW, IPPROTO_ICMP)
s.setsockopt(IPPROTO_IP, IP_HDRINCL, 1)
s.sendto('test', ('127.0.0.1', 0)) # without this it doesn't work.
recv()

[Grant Edwards]

On 2005-09-07, billiejoex <bi********@fastwebnet.it> wrote:

Hi all. I'm trying to make a simple icmp sniffer by using
SOCK_RAW.
Just a suggestion: you'd probably be better off using the PCAP
library.
The code below works but ONLY if I first use the sendto()
function. Does anybody knows why?

'Fraid not.

--
Grant Edwards grante Yow! I just bought
at FLATBUSH from MICKEY
visi.com MANTLE!