Parse a Wireshark pcap file

Dave Angel d at davea.name
Wed Jan 23 04:03:46 CET 2013


On 01/22/2013 08:32 PM, Kevin Holleran wrote:
> Is there a way to parse out a wireshark pcap file and extract key value
> pairs from the data?  I am illustrated a sniff of some traffic and why it
> needs utilize HTTPS instead of HTTP but I was hoping to run the pcap
> through a python script and just output some interesting key value
> pairs....
>

Sure.  scapy can create and/or parse pcap files.

http://pypi.python.org/pypi/Scapy


-- 
DaveA



More information about the Python-list mailing list