how to handle/generate pcap file

[Jorgen Grahn]

On Wed, 1 Apr 2009 18:59:12 -0700 (PDT), Evan <xdicry at gmail.com> wrote:
> On Apr 2, 6:59 am, "Rhodri James" <rho... at wildebst.demon.co.uk> wrote:
>> On Wed, 01 Apr 2009 14:53:34 +0100, Evan <xdi... at gmail.com> wrote:
>>
>> > Hello -
>>
>> > I'm trying to decode thepcapfilewhich is packet capture by tcpdump
>> > or wireshark.   Is there a python module that I can use it for this
>> > problem?
>>
>> > Can python-libpcap or pycap or dpkt do that?
>>
>> A quick browse of the pypcap website suggests that yes, it can.
>>
>> --
>> Rhodri James *-* Wildebeeste Herder to the Masses
>
>
> Yap, I found that dpkt can do this, Thanks all.

I have used the 'pcapy' module successfully for this. Might be better
than the ones mentioned above, might be worse.

Also, the pcap file format isn't really hard: you can write such code
by yourself in a few hours. I've done that too.

/Jorgen

-- 
  // Jorgen Grahn <grahn@        Ph'nglui mglw'nafh Cthulhu
\X/     snipabacken.se>          R'lyeh wgah'nagl fhtagn!