对pcap文件中每个包进行内容提取,提取出pcap头每个包header和data部分,存入txt
#!/usr/bin/env python
#coding=utf-8
#读取pcap文件,解析相应的信息,为了在记事本中显示的方便,把二进制的信息
import struct
import time, datetime
def time_trans(GMTtime):
#print(GMTtime)
timeArray = time.localtime(GMTtime)
otherStyleTime = time.strftime("%Y--%m--%d %H:%M:%S", timeArray)
return otherStyleTime # 2013--10--10 23:40:00
class pcap_packet_header:
def __init__(self):
self.GMTtime = b'\x00\x00'
self.MicroTime = b'\x00\x00'
self.caplen = b'\x00\x00'
self.lens = b'\x00\x00'
if __name__=='__main__':
fpcap = open('1.pcap','rb')
ftxt = open('result.txt','w')
string_data = fpcap.read()
#pcap文件包头解