scapy.layers.llmnr

LLMNR (Link Local Multicast Node Resolution).

[RFC 4795]

LLMNR is based on the DNS packet format (RFC1035 Section 4) RFC also envisions LLMNR over TCP. Like vista, we don’t support it – arno

class scapy.layers.llmnr.LLMNRQuery

Bases: scapy.packet.Packet

aliastypes
fields_desc
LLMNRQuery fields

id

ShortField

0

qr

BitField (1 bit)

0

opcode

BitEnumField (4 bits)

0

c

BitField (1 bit)

0

tc

BitField (2 bits)

0

z

BitField (4 bits)

0

rcode

BitEnumField (4 bits)

0

qdcount

DNSRRCountField

None

ancount

DNSRRCountField

None

nscount

DNSRRCountField

None

arcount

DNSRRCountField

None

qd

DNSQRField

None

an

DNSRRField

None

ns

DNSRRField

None

ar

DNSRRField

None

hashret()
class scapy.layers.llmnr.LLMNRResponse

Bases: scapy.layers.llmnr.LLMNRQuery

aliastypes
answers(other)
fields_desc
LLMNRResponse fields

id

ShortField

0

qr

BitField (1 bit)

1

opcode

BitEnumField (4 bits)

0

c

BitField (1 bit)

0

tc

BitField (2 bits)

0

z

BitField (4 bits)

0

rcode

BitEnumField (4 bits)

0

qdcount

DNSRRCountField

None

ancount

DNSRRCountField

None

nscount

DNSRRCountField

None

arcount

DNSRRCountField

None

qd

DNSQRField

None

an

DNSRRField

None

ns

DNSRRField

None

ar

DNSRRField

None