iterate over pcap, base64 decode packet data w/ python

read_pcap_data.py

import json
from pprint import pprint
from scapy.all import *

packets = rdpcap('sniff.cap')

# Let's iterate through every packet
c = 1
arr = []
for packet in packets:
    p = {
        'idx': c,
        'src': packet[IP].src,
        'dst': packet[IP].dst
    }
    if not isinstance(packet[TCP].payload, scapy.packet.NoPayload):
        payload = json.loads(bytes(packet[TCP].payload).decode('utf-8'))
        p.update(payload)
        p['_data'] = base64.b64decode(payload['data']).decode('utf-8')
        p.__delitem__('data')
    arr.append(p)
    c += 1
pprint(arr)