!/usr/bin/python
coding=utf-8
import dpkt
import socket
def printPcap(pcap):
# 遍歷[timestamp, packet]記錄的數(shù)組
for (ts, buf) in pcap:
try:
# 獲取以太網(wǎng)部分數(shù)據(jù)
eth = dpkt.ethernet.Ethernet(buf)
# 獲取IP層數(shù)據(jù)
ip = eth.data
# 把存儲在inet_ntoa中的IP地址轉(zhuǎn)換成一個字符串
src = socket.inet_ntoa(ip.src)
dst = socket.inet_ntoa(ip.dst)
print '[+] Src: ' + src + ' --> Dst: ' + dst
except:
pass
def main():
f = open('geotest.pcap')
pcap = dpkt.pcap.Reader(f)
printPcap(pcap)
if name == 'main':
main()
