{"id":19059,"date":"2022-08-06T22:22:05","date_gmt":"2022-08-06T16:52:05","guid":{"rendered":"https:\/\/beautifulworknew.wordpress.com\/?p=19059"},"modified":"2022-08-06T22:22:05","modified_gmt":"2022-08-06T16:52:05","slug":"packet-capturing-related-using-read_pcap-py","status":"publish","type":"post","link":"https:\/\/www.trueangle.org\/index.php\/2022\/08\/06\/packet-capturing-related-using-read_pcap-py\/","title":{"rendered":"Read on packet capturing using pyshark"},"content":{"rendered":"\n<p><\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">$python3  read_pcap.py &gt; pcap-result.txt\n\n$cat read_pcap.py \n#!\/usr\/bin\/env python3\n\nimport pyshark\n\n#cap = pyshark.FileCapture('http.cap', display_filter=\"dns\")\n#for pkt in cap:\n#\tprint(pkt)\n\t\ncap = pyshark.FileCapture('http.cap', keep_packets=False)\n\ndef print_info_layer(packet):\n\tprint(\"[Protocol:] \"+packet.highest_layer+\" [Source IP:] \"+packet.ip.src+\" [Destination IP:]\"+packet.ip.dst)\ncap.apply_on_packets(print_info_layer)\n\n\n\n$cat pcap-result.txt \n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] HTTP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] DNS [Source IP:] 145.254.160.237 [Destination IP:]145.253.2.203\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] DNS [Source IP:] 145.253.2.203 [Destination IP:]145.254.160.237\n[Protocol:] HTTP [Source IP:] 145.254.160.237 [Destination IP:]216.239.59.99\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 216.239.59.99 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 216.239.59.99 [Destination IP:]145.254.160.237\n[Protocol:] DATA-TEXT-LINES [Source IP:] 216.239.59.99 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]216.239.59.99\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 216.239.59.99 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]216.239.59.99\n[Protocol:] XML [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n$\n$python3  read_pcap.py &gt; pcap-result.txt\n$cat  pcap-result.txt\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] HTTP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] DNS [Source IP:] 145.254.160.237 [Destination IP:]145.253.2.203\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] DNS [Source IP:] 145.253.2.203 [Destination IP:]145.254.160.237\n[Protocol:] HTTP [Source IP:] 145.254.160.237 [Destination IP:]216.239.59.99\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 216.239.59.99 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 216.239.59.99 [Destination IP:]145.254.160.237\n[Protocol:] DATA-TEXT-LINES [Source IP:] 216.239.59.99 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]216.239.59.99\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 216.239.59.99 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]216.239.59.99\n[Protocol:] XML [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223\n[Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237\n$  <\/pre>\n","protected":false},"excerpt":{"rendered":"<p>$python3 read_pcap.py &gt; pcap-result.txt $cat read_pcap.py #!\/usr\/bin\/env python3 import pyshark #cap = pyshark.FileCapture(&#8216;http.cap&#8217;, display_filter=&#8221;dns&#8221;) #for pkt in cap: # print(pkt) cap = pyshark.FileCapture(&#8216;http.cap&#8217;, keep_packets=False) def print_info_layer(packet): print(&#8220;[Protocol:] &#8220;+packet.highest_layer+&#8221; [Source IP:] &#8220;+packet.ip.src+&#8221; [Destination IP:]&#8221;+packet.ip.dst) cap.apply_on_packets(print_info_layer) $cat pcap-result.txt [Protocol:] TCP [Source IP:] 145.254.160.237 [Destination IP:]65.208.228.223 [Protocol:] TCP [Source IP:] 65.208.228.223 [Destination IP:]145.254.160.237 [Protocol:] TCP [Source IP:] 145.254.160.237 &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.trueangle.org\/index.php\/2022\/08\/06\/packet-capturing-related-using-read_pcap-py\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Read on packet capturing using pyshark&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/posts\/19059"}],"collection":[{"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/comments?post=19059"}],"version-history":[{"count":0,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/posts\/19059\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/media?parent=19059"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/categories?post=19059"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/tags?post=19059"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}