Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
Dead simple PoC of how scapy could be used to build a replacement Wireshark without C
#!/usr/bin/env python2
try:
import scapy.all as scapy
except ImportError:
import scapy
if __name__ == "__main__":
from argparse import ArgumentParser
parser = ArgumentParser(
prog=__file__,
description="Proof of concept for wireshark replacement",
version="%(prog)s v0.0.1 by Brian Wallace (@botnet_hunter)",
epilog="%(prog)s v0.0.1 by Brian Wallace (@botnet_hunter)"
)
parser.add_argument('path', metavar='path', type=str, nargs='*', default=None, help="Paths to files to parse")
args = parser.parse_args()
for p in args.path:
pcap = scapy.rdpcap(p)
for packet in pcap:
print packet.show()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.