使用pypcap:
import dpkt, pcappc = pcap.pcap() # construct pcap objectpc.setfilter('icmp') # filter out unwanted packetsfor timestamp, packet in pc: print dpkt.ethernet.Ethernet(packet)输出样本:
Ethernet(src='x00x03Gxb2Mxe4', dst='x00x03Gx06hx18', data=IP(src='nx00x01x1c',dst='nx00x01x10', sum=39799, len=60, p=1, ttl=128, id=35102, data=ICMP(sum=24667,type=8, data=Echo(id=512, seq=60160, data='abcdefghijklmnopqrstuvwabcdefghi'))))Ethernet(src='x00x03Gx06hx18', dst='x00x03Gxb2Mxe4', data=IP(src='nx00x01x10',dst='nx00x01x1c', sum=43697, len=60, p=1, ttl=255, id=64227, data=ICMP(sum=26715,data=Echo(id=512, seq=60160, data='abcdefghijklmnopqrstuvwabcdefghi'))))



