scapy.layers.llmnr

LLMNR (Link Local Multicast Node Resolution).

[RFC 4795]

LLMNR is based on the DNS packet format (RFC1035 Section 4) RFC also envisions LLMNR over TCP. Like vista, we don’t support it – arno

class scapy.layers.llmnr.LLMNRQuery

Bases: scapy.packet.Packet

aliastypes

fields_desc

LLMNRQuery fields

id	ShortField	0
qr	BitField (1 bit)	0
opcode	BitEnumField (4 bits)	0
c	BitField (1 bit)	0
tc	BitField (2 bits)	0
z	BitField (4 bits)	0
rcode	BitEnumField (4 bits)	0
qdcount	DNSRRCountField	None
ancount	DNSRRCountField	None
nscount	DNSRRCountField	None
arcount	DNSRRCountField	None
qd	DNSQRField	None
an	DNSRRField	None
ns	DNSRRField	None
ar	DNSRRField	None

hashret()

class scapy.layers.llmnr.LLMNRResponse

Bases: scapy.layers.llmnr.LLMNRQuery

aliastypes

answers(other)

fields_desc

LLMNRResponse fields

id	ShortField	0
qr	BitField (1 bit)	1
opcode	BitEnumField (4 bits)	0
c	BitField (1 bit)	0
tc	BitField (2 bits)	0
z	BitField (4 bits)	0
rcode	BitEnumField (4 bits)	0
qdcount	DNSRRCountField	None
ancount	DNSRRCountField	None
nscount	DNSRRCountField	None
arcount	DNSRRCountField	None
qd	DNSQRField	None
an	DNSRRField	None
ns	DNSRRField	None
ar	DNSRRField	None