Selecting certain bits from a TCP headerby rspishock (Monk)
|on Aug 20, 2011 at 18:44 UTC||Need Help??|
rspishock has asked for the
wisdom of the Perl Monks concerning the following question:
While I still consider myself quite new to Perl, I've been working on random projects to build on my knowledge. And the current script that I'm working on is without a doubt, one that is teaching me quite a bit.
I'm currently in the planning stages of developing a program which will examine TCP headers from a pcap file searching to see if certain bits are active or not, signaling the possibility of steganographic communications. If so, I plan on creating a document with will indicate this.
So now to my question. Can anyone offer some guidance on how I would single out specific bits of the TCP header, specifically bits 100-103? As I said previously, I'm using this as a learning experience, and I'm basically in the planning stages of working on this program. All I really have is a rough shell including modules that I need to call upon but I'm hoping this will help in grasping this concept.
Thank you all in advance.
Thanks for the all of the tips so far, it's starting to point me in the right direction.