|P is for Practical
Re: Finding patterns in packet data?by Anonymous Monk
|on Aug 04, 2000 at 22:37 UTC
Ok. Maybe I'm not being clear enough about what I'm trying to do. Here's an example of what I've got:
This is the part of the UDP packet immediately after the UDP checksum with the trailing padding removed. This is, then, the meat of the packet. What I'm looking for is an unknown length value in this meat that is also in a large percentage of all the other meats. It won't be in all, because there will be a few challenge/response packet, etc.
Do I compare packet A to B and see what matches, then A to C, A to D, etc and see what I get? This seems to be very cumbersome.