# -*- coding:utf-8 -*-
from scapy.all import *
import argparse
# 创建解析器并添加参数
parser = argparse.ArgumentParser()
parser.add_argument('--document', '-d',
default=r'E:\ICS-Pcaps-master\AMQP\AMQP_Sample.pcap',
help='the directory containing pcap files')
parser.add_argument('--destination', '-dip', default=None, help="destination ip to update")
parser.add_argument('--source_mac', '-smac', default=None , help="source mac to update")
parser.add_argument('--destination_mac', '-dmac', default=None, help="destination mac to update")
parser.add_argument('--path', '-p',
default=r'E:\ICS-Pcaps-master\AMQP\AMQP_Sample1.pcap',
help="Path to the save ")
args = parser.parse_args()
def edit_ip_mac(document, destination, source_mac, destination_mac, path):
try:
pkts = rdpcap(document)
except Scapy_Exception as e :
print("文件格式不正确!!")
return None
new_pkts = []
for pkt in pkts:
if destination is not None:
pkt['IP'].dst = destination
if source_mac is not None:
pkt['Ether'].src = source_mac
if destination_mac is not None:
pkt['Ether'].dst = destination_mac
pkt['IP'].chksum = None # 修改报文后进行校验
pkt = pkt.__class__(bytes(pkt)) # 重新计算报文长度
new_pkts.append(pkt)
wrpcap(path, new_pkts)
return new_pkts
if __name__ == "__main__" :
edit_ip_mac(args.document, args.destination, args.source_mac, args.destination_mac, args.path)
本文主要是修改pcap文件中的信息,修改内容为目的ip和二层信息,此代码灵活度较高,添加scapy对应的字段即可修改对应的内容。