在python中寻找一个模块,它可以读取PCAP文件并将其写入csv格式。已经研究过pyshark模块??无法以所需的形式获得输出。
capture = pyshark.FileCapture(r"C:\Temp\wireshark\data.pcap")
for pkt in capture:
pkt = str(pkt)
out.write(pkt)
发布于 2022-02-08 06:17:28
尝试模块rdpcap
阅读这里获取更多信息- https://medium.com/@vworri/extracting-the-payload-from-a-pcap-file-using-python-d938d7622d71
pkts = rdpcap('example.pcap')
with open("Pcap/test.csv", "w") as f:
for pkt in pkts:
if IP in pkt:
ip_src=pkt[IP].src
ip_dst=pkt[IP].dst
if TCP in pkt:
tcp_dport=pkt[TCP].dport
csv_header = "IP_src,IP_drc,dst_port\n"
s = ""
for scr in str(ip_src):
s+=str(scr)
csv_header += s + ','
s_ = ''
for dst in str(ip_dst) :
s_+=str(dst)
csv_header += s_ + ','
s_1 = ''
for dst_tcp in str(tcp_dport):
s_1 += str(dst_tcp)
csv_header += s_1
f.write(csv_header)
https://stackoverflow.com/questions/71029102
复制相似问题