pkts使用

pkts maven

<!-- https://mvnrepository.com/artifact/io.pkts/pkts-core -->

<dependency>

<groupId>io.pkts</groupId>

<artifactId>pkts-core</artifactId>

<version>3.0.10</version>

</dependency>

解包

package com.wzj.pcap;
 
import io.pkts.PacketHandler;
import io.pkts.Pcap;
import io.pkts.buffer.Buffer;
import io.pkts.packet.Packet;
import io.pkts.protocol.Protocol;
 
import java.io.IOException;
 
/**
 * Created by wzj on 2017/10/26.
 */
public class PcapParser
{
    public static void main(String[] args) throws IOException
    {
        final Pcap pcap = Pcap.openStream("f:\\aa.pcap");
 
        pcap.loop(new PacketHandler()
        {
            @Override
            public boolean nextPacket(final Packet packet) throws IOException
            {
                if (packet.hasProtocol(Protocol.TCP))
                {
                    Buffer payload = packet.getPacket(Protocol.TCP).getPayload();
                    if (payload != null)
                    {
                        System.out.println(payload);
                    }
 
                }
 
                return true;
            }
        });
    }
}

import io.pkts.PacketHandler;
import io.pkts.Pcap;
import io.pkts.buffer.Buffer;
import io.pkts.packet.Packet;
import io.pkts.protocol.Protocol;

import java.io.IOException;
import java.util.Arrays;


public class Test {

    public static void main(String[] args) throws IOException {
        final Pcap pcap = Pcap.openStream("C:\\Users\\14307\\Desktop\\2.pcap");
        final int[] i = {1};
        pcap.loop(packet -> {
            System.out.println(i[0]);
            if (packet.hasProtocol(Protocol.TCP))
            {
                Buffer payload = packet.getPacket(Protocol.TCP).getPayload();
                if (payload != null) {
                    System.out.println(payload);
                    System.out.println(Arrays.toString(payload.getArray()));
                    System.out.println(Arrays.toString(payload.getRawArray()));

                }
            }
            i[0]++;
            return true;
        });


    }



}