- After analyzing several packets we can conclude that there is something to be done with
ICMP
. - So apply the
ICMP filter
and startanalyzing
. - We can see that packets from the
source = 192.168.1.200
has someZIP
Magic Numbers. - In
scapy
there are lots of ways to extract the data. - …