{"action":"opened","issue":{"url":"https://api.github.com/repos/secdev/scapy/issues/179","repository_url":"https://api.github.com/repos/secdev/scapy","labels_url":"https://api.github.com/repos/secdev/scapy/issues/179/labels{/name}","comments_url":"https://api.github.com/repos/secdev/scapy/issues/179/comments","events_url":"https://api.github.com/repos/secdev/scapy/issues/179/events","html_url":"https://github.com/secdev/scapy/issues/179","id":156728076,"number":179,"title":"Make MDNS queries with Scapy","user":{"login":"Lodags","id":5467204,"avatar_url":"https://avatars.githubusercontent.com/u/5467204?v=3","gravatar_id":"","url":"https://api.github.com/users/Lodags","html_url":"https://github.com/Lodags","followers_url":"https://api.github.com/users/Lodags/followers","following_url":"https://api.github.com/users/Lodags/following{/other_user}","gists_url":"https://api.github.com/users/Lodags/gists{/gist_id}","starred_url":"https://api.github.com/users/Lodags/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Lodags/subscriptions","organizations_url":"https://api.github.com/users/Lodags/orgs","repos_url":"https://api.github.com/users/Lodags/repos","events_url":"https://api.github.com/users/Lodags/events{/privacy}","received_events_url":"https://api.github.com/users/Lodags/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-05-25T11:35:58Z","updated_at":"2016-05-25T11:35:58Z","closed_at":null,"body":"Thank you Guedou for you help !\r\n\r\nThe issue is that I try to forge mDNS queries, but they aren't successful as they don't return any answers. They are successfully sent though.\r\n\r\n(The dig command : dig -x 192.168.50.29 @224.0.0.251 -p 5353 +short )\r\n\r\nHere is what I tried : \r\nsr1 or wireshark(IP(dst=\"224.0.0.251\")/\\\r\n                UDP(dport=5353)/\\\r\n                DNS(rd=1,qd=DNSQR(qname=\"192.168.50.29\",qtype='PTR')))\r\n\r\nWireshark:\r\n   ->The dig frame is a good MDNS frame\r\n   -> The Scapy is a DNS frame (... I don't know why I expected a mDNS here)\r\n\r\nWhen I try to replay the dig request, it doesn't work. It looks like this : \r\nd=sr1(IP(dst=\"224.0.0.251\")/\\\r\n        UDP(dport=5353)/\\\r\n        Raw(load=   '\\x03\\x83'\r\n                    #Transaction ID\r\n                    '\\x01\\x00'\r\n                    #Flags\r\n                    '\\x00\\x01'\r\n                    #Questions\r\n                    '\\x00\\x00'\r\n                    #Answers RR\r\n                    '\\x00\\x00'\r\n                    #Authority RR\r\n                    '\\x00\\x00'\r\n                    #Additionnal RRs\r\n                    '\\x02\\x32\\x39\\x02\\x00\\x10\\x35\\x30\\x03\\x31\\x36\\x38\\x03\\x31\\x39\\x32\\x07\\x69\\x6e\\x2d\\x61\\x64\\x00\\x20\\x64\\x72\\x04\\x61\\x72\\x70\\x61\\x00'\r\n                    #Name\r\n                    '\\x00\\x0c'\r\n                    #PT\r\n                    '\\x00\\x01'))\r\n                    #IN\r\n\r\nHowever, when I try to send this kind of packet, forged by myself, it's detected as malformed by wireshark.\r\nDo you have a better way to do this ?\r\nIf no, does a mDNS layer is required ? I'd love to contribute to Scapy and make one if it's needed. But as I am just an amateur in networks, is it relevant to create a new layer ?\r\n\r\nThank you !\r\n\r\nLodags -- I hope I'm understandable, I'm French. (And sometimes even Frenchs don't understand me)"}}
{"actor":{"display_login":"Lodags"}}