Python提取cuckoo运行结果到新目录中

cuckoo分析大量样本时，手动复制pcap、report就会很繁琐。可以使用python脚本把我们关注的结果提取到新的目录中，并以md5命名。代码如下：

#coding=utf-8
import os
import json
import shutil

root_path='/home/cert/cuckoo-linux/storage/analyses/'      #cuckoo的分析结果路径
rescult_path='/home/cert/rescult/'                         #report、pcap、源文件安置路径

for num in range(1,752):    #迭代1到753之间的数据
	sreport_path=root_path+str(num)+'/reports/report.json' #str()把数字转换成字符串
	print sreport_path
	f=open(sreport_path,'r')
	root=json.load(f)
	f.close()

	try:
		md5=root['target']['file']['md5']
		sfile_path=root['target']['file']['path']           #linux沙箱会在提交样本时，会把样本复制到cuckoo目录下的一个新路径
		spcap_path=root_path+str(num)+'/'+'dump_sorted.pcap'
		dpcap_path=rescult_path+md5+'.pcap'
		dfile_path=rescult_path+md5
		dreport_path=rescult_path+md5+'.json'
		print md5
		print sfile_path
		print spcap_path
		print dpcap_path
		print dfile_path
		print dreport_path
		try:
			shutil.copy(spcap_path, dpcap_path)
			shutil.copy(sfile_path, dfile_path)
			shutil.copy(sreport_path, dreport_path)
		except:
			print 'copy fail'
	except:
		md5='no md5'

结果如下图：