Simple LLMNR listener.

llmnr-listen.py

import socket

ALL = "0.0.0.0"
LLMNR_ADDR = "224.0.0.252"
LLMNR_PORT = 5355

def hexPretty(firstB, lastB):
    return ''.join('%02x' % b for b in data[firstB:lastB])

sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM, socket.IPPROTO_UDP)
sock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
sock.bind((ALL, LLMNR_PORT))
sock.setsockopt(socket.IPPROTO_IP, socket.IP_MULTICAST_TTL, 255)
sock.setsockopt(socket.IPPROTO_IP, socket.IP_ADD_MEMBERSHIP, socket.inet_aton(LLMNR_ADDR) + socket.inet_aton(ALL))
while True:
    try:
        data, addr = sock.recvfrom(1024)
        print("request 0x%s from %s" % (hexPretty(0,len(data)), addr))
        tid = hexPretty(0, 2)
        flags = hexPretty(2, 4) 
        questions = hexPretty(4, 6)
        nameLen = int(data[12])
        hostname = ''.join(chr(x) for x in data[13:(13+nameLen)])
        queryType = hexPretty((13+nameLen+1),(13+nameLen+3)) 
        queryClass = hexPretty((13+nameLen+3),(13+nameLen+5))
        print("tid: 0x%s" % tid)
        print("flags: 0x%s" % flags)
        print("questions: 0x%s" % questions)
        print("name length: %i" % nameLen)
        print("name: %s" % hostname)
        print("type: 0x%s" % queryType)
        print("class: 0x%s" % queryClass)
        print("-" * 120)
    except:
        raise