Net::Inspect::L3::IP - get raw IP packets, reassemble fragments
my $raw = Net::Inspect::L3::IP->new($tcp); $raw->pktin($data,$timestamp);
Gets Raw-IP packets via pktin hook, extracts meta-data, reassembles fragmented packets and calls pktin hook on attached flows, once for each full packet.
pktin
Provides the hooks required by Net::Inspect::L2::Pcap. Usually Net::Inspect::L4::TCP or similar are used as upper flow.
Net::Inspect::L2::Pcap
Net::Inspect::L4::TCP
Constructor:
The only used argument is %args is timeout, which specifies when timeout in seconds, after which the next fragment of a packet must be received. Defaults to 60.
timeout
Hooks provided:
Hooks called:
The following meta data are given:
time when the last fragment of the packet was received. Like time_t, but double.
the addresses of the sender and destination of the packet
protocol of the packet
QoS (IPv4) flags or Type Of Service (IPv6) of the packet
TTL (IPv4) or hoplimit (IPv6) counter of the packet
flow label (IPv6 only)
id of the packet (IPv4 only)
Number of fragments or undef if packet wasn't fragmented (IPv4 only)
To install Net::Inspect, copy and paste the appropriate command in to your terminal.
cpanm
cpanm Net::Inspect
CPAN shell
perl -MCPAN -e shell install Net::Inspect
For more information on module installation, please visit the detailed CPAN module installation guide.