import scapy.all as scapy
packets = scapy.rdpcap("agent.pcap") # 读取pcap文件
'''
rdpcap(filename, count=-1)
Read a pcap file and return a packet list
count: read only <count> packets
'''
for p in packets:
for f in p.payload.payload.payload.fields_desc:
fvalue = p.payload.payload.getfieldval(f.name)
reprval = f.i2repr(p.payload.payload, fvalue)# 转换成十进制字符串
if 'HTTP' in reprval:
lst = str(reprval).split(r'\r\n')
for l in lst:
print l
python解析pcap文件
最新推荐文章于 2024-04-29 13:53:06 发布