scapy 中sniff指定的數據包並打印指定信息

在理解這篇文章前能夠先看看這兩篇文章：

http://www.javashuo.com/article/p-xkueyzii-kp.html

http://www.javashuo.com/article/p-kdmwnvkt-kp.html

一、抓取報文，並打印出來

#將抓取到的報文的summary打印出來
sniff(filter="icmp", prn=lambda x:x.summary(), count=10)

#抓取tcp報文，並打印目的地ip地址
sniff(filter="tcp", prn=lambda x:x[TCP].dst, count=10)

抓取源地址爲172.31.100.222的端口爲80的tcp報文
sniff(filter="ip src 172.31.100.222 and tcp and tcp port 80", prn=lambda x:x.summary())

或者定義一個回調函數：

def packet_callback(packet):
    print packet.show()

sniff(prn=packet_callback, count=10)

 

#coding:utf-8
from scapy.all import *
#顯示網卡信息
#show_interfaces()

def getRaw(p):
    print("aaa")
    #判斷該類是否有Raw
    if hasattr(p,"Raw"):
        pass
    else:
        print(p[Raw])
        
def getRaw1(p):
    raw = None
    p.sprintf("%IP.dst%")
    hexdump(p)
    try:
        print("=================================")
        raw = p[Raw]
        raw.show()
        #print(raw.load)
        #raw.sprintf("%Raw.load%")except:
        pass
        

dpkg = sniff(filter="tcp",count=10,prn=getRaw1)

'''
for i in dpkg:
    print("------------------------------------------")
    #i.show()
    
    
'''