python数据包分析_python解析发往本机的数据包示例(解析数据包)

最新推荐文章于 2024-07-28 23:52:17 发布

aye toms

最新推荐文章于 2024-07-28 23:52:17 发布

阅读量300

点赞数

文章标签： python数据包分析

本文链接：https://blog.csdn.net/weixin_42361708/article/details/113670944

版权

本文介绍了如何使用Python解析发往本机的TCP和UDP数据包。通过创建原始套接字并绑定到公共接口，获取IP头和协议头信息，展示源端口、目的端口、序列号等关键数据。

摘要由CSDN通过智能技术生成

tcp.py

代码如下:

# -*- coding: cp936 -*-

import socket

from struct import *

from time import ctime,sleep

from os import system

system('title tcp sniffer')

system('color 05')

# the public network interface

HOST = socket.gethostbyname(socket.gethostname())

# create a raw socket and bind it to the public interface

s = socket.socket(socket.AF_INET, socket.SOCK_RAW, socket.IPPROTO_IP)

s.bind((HOST, 0))

# Include IP headers

s.setsockopt(socket.IPPROTO_IP, socket.IP_HDRINCL, 1)

# receive all packages

#s.ioctl(socket.SIO_RCVALL, socket.RCVALL_ON)

# receive a package

while 1==1:

packet = s.recvfrom(65565)

packet = packet[0]

ip_header = packet[0:20]

iph = unpack('!BBHHHBBH4s4s',ip_header)

version = iph[0] >> 4 #Version

ihl = iph[0] * 0xF #IHL

iph_length = ihl * 4 #Total Length

ttl = iph[5]

protocol = iph[6]

s_addr = socket.inet_ntoa(iph[8])

d_addr = socket.inet_ntoa(iph[9])

print ctime()

print 'Version : ' + str(version) + ' IHL : ' + str(ihl) + ' Total Length: '+str(iph_length) + ' TTL : ' +str(ttl) + ' Protocol : ' + str(protocol) + ' Source Address : ' + str(s_addr) + ' Destination Address : ' + str(d_addr)

if protocol == 6:

tcp_header = packet[20:40]

tcph = unpack('!HHLLBBHHH' , tcp_header)

source_port = tcph[0]

dest_port = tcph[1]

sequence = tcph[2]

acknowledgement = tcph[3]

doff_reserved = tcph[4]

tcph_length = doff_reserved >> 4

print 'Source Port : ' + str(source_port) + ' Dest Port : ' + str(dest_port) + ' Sequence Number : ' + str(sequence) + ' Acknowledgement : ' + str(acknowledgement) + ' TCP header length : ' + str(tcph_length)

data = packet[40:len(packet)]

print 'Data : ' + data

# disabled promiscuous mode

s.ioctl(socket.SIO_RCVALL, socket.RCVALL_OFF)