# How to analysis a packet?

**URL:** <https://www.ruby-forum.com/t/how-to-analysis-a-packet/147680>\
**Category:** Ruby\
**Created:** [September 4, 2008, 8:25am UTC](https://www.ruby-forum.com/t/how-to-analysis-a-packet/147680 "2008-09-04T08:25:28Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![slaughter](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/b782af/32.png) [@slaughter](https://www.ruby-forum.com/u/slaughter)\
**Post date:** [September 4, 2008, 8:25am UTC](https://www.ruby-forum.com/t/how-to-analysis-a-packet/147680/1 "2008-09-04T08:25:28Z")

</div>

Hello all, I need to send SNMP packets and check whether SNMP-Response  
packets  
are received. I was looking at rubyforger, which seems to allow me to  
do this quite easily. However, rubyforger is dependent on ruby pcap  
and  
ruby pcap doesnt seem to install on windows(ruby-pcap-0.6.tar). Has  
anybody successfully  
done so or has a suggestion ?  
Thanks-

---

<div class="post-metadata">

**Author:** ![slaughter](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/b782af/32.png) [@slaughter](https://www.ruby-forum.com/u/slaughter)\
**Post date:** [September 4, 2008, 8:29am UTC](https://www.ruby-forum.com/t/how-to-analysis-a-packet/147680/2 "2008-09-04T08:29:39Z")

</div>

slaughter wrote:

> Hello all, I need to send SNMP packets and check whether SNMP-Response  
> packets  
> are received. I was looking at rubyforger, which seems to allow me to  
> do this quite easily. However, rubyforger is dependent on ruby pcap  
> and  
> ruby pcap doesnt seem to install on windows(ruby-pcap-0.6.tar). Has  
> anybody successfully  
> done so or has a suggestion ?  
> Thanks-

As far as I know , you can find pcap for windows at [www.winpcap.org](http://www.winpcap.org) .  
You should try to install that , and then try to install ruby-pcap .

---

<div class="post-metadata">

**Author:** ![slaughter](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/b782af/32.png) [@slaughter](https://www.ruby-forum.com/u/slaughter)\
**Post date:** [September 14, 2008, 4:20pm UTC](https://www.ruby-forum.com/t/how-to-analysis-a-packet/147680/3 "2008-09-14T16:20:30Z")

</div>

On Sep 8, 11:44 pm, Jeremy H. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> [Google Code Archive - Long-term storage for Google Code Project Hosting.](http://code.google.com/p/packetfu/)

PacketFu just got up-revved yesterday for Windows goodness, and it  
should easily be able to look for a SNMP response for you. Something  
like…

irb -r packetfu-shell.rb  
cap = Capture.new(:iface =\> ‘whatever your interface name is’)  
cap.show\_live(:filter =\> ‘port 161’)

…ought to get you started.

-tod

---

<div class="post-metadata">

**Author:** ![slaughter](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/b782af/32.png) [@slaughter](https://www.ruby-forum.com/u/slaughter)\
**Post date:** [September 9, 2008, 6:51am UTC](https://www.ruby-forum.com/t/how-to-analysis-a-packet/147680/4 "2008-09-09T06:51:28Z")

</div>

On Thu, Sep 04, 2008 at 03:19:24PM +0900, slaughter wrote:

> Hello all, I need to send SNMP packets and check whether SNMP-Response  
> packets  
> are received. I was looking at rubyforger, which seems to allow me to  
> do this quite easily. However, rubyforger is dependent on ruby pcap  
> and  
> ruby pcap doesnt seem to install on windows(ruby-pcap-0.6.tar). Has  
> anybody successfully  
> done so or has a suggestion ?  
> Thanks-

You may also want to take a look at packet\_fu

[Google Code Archive - Long-term storage for Google Code Project Hosting.](http://code.google.com/p/packetfu/)

enjoy,

-jeremy