title |
---|
Python pcap file library |
This is a pcap file reader and writer which doesn't need libpcap. The read interface is similar to that of pcapy, but you can do things like read packets from a StringIO or gzip object. It handles different-endian files transparently.
This can also write pcap files, because hey, why not.
To use it:
>>> import pcap
>>> p = pcap.open('test.pcap', 'w') # Create a new file
>>> p.write(((0, 0, 3), 'foo')) # Add a packet
>>> p.write(((0, 0, 3), 'bar'))
>>> del p
>>> p = pcap.open(file('test.pcap')) # Also takes file objects
>>> (p.version, p.thiszone, p.sigfigs, p.snaplen, p.linktype)
((2, 4), 0, 0, 65535, 1)
>>> [i for i in p] # Iterable
[((0, 0, 3), 'foo'), ((0, 0, 3), 'bar')]
>>>