After play Packet that i have build the Packet seems to be currepted

Mar 7, 2014 at 12:09 PM
I try to take Radius packet and change several fields:

Radius User
Frame IP Address
Because i am using PcapDotNet DLLs i can get all the packet byte with the command:

byte[] packetArr = Packet.Buffer;
and after that i save this byte hard coded:
 byte[] arr = {17, 34, 51, 68, 85, 10, 20, 20, 34, 24, 
                               12, 91, 78, 06, 90 ,09 ,58, 81, 17, 00, 
                               12, 81, 71, 36, 25, 41, 06, 15, 01, 35, 
                               17, 24, 91, 12, 37, 91, 29, 61, 10, 07,
                               24, 41, 43, 41, 06, 70, 00, 00, 00, 00, 
                               00, 00, 00, 01, 61, 07, 10, 51, 10, 11, 
                               18, 61, 06, 15, 01, 35, 96, 25, 52, 55, 
                               25, 52, 55, 31, 85, 55, 55, 55, 55, 55, 
                               54, 06, 00, 01, 44, 65, 35, 35, 35, 33, 
                               09, 55, 53, 50, 50, 53, 53, 53};
I have checked and packetArr and arr are identical. So now i want to create new Packet (before changing Radius User and Frame IP Address - only for debugging):

Packet p = new Packet(arr , DateTime.Now, DataLinkKind.Ethernet);
And play this packet, the result is strange and the packet look like several layers missing and i don't know how its possible because it the same Packet:

Image
Coordinator
Mar 14, 2014 at 10:41 AM
Hi psptst1,

Can you provide a .pcap file with the original RADIUS packet and a .pcap file with the modified RADIUS packet (input and output)?

Boaz.