CODEWITHSUNDEEP
pythonwiresharkpcaplibpcappcap-ng
jonschipp
jonschipp

Reputation: 841

How to print PCAPNG metadata in Python?

I'm attempting my first Python program and could use a little help. My script on github

I need a way to print the metadata in a PCAPNG file. I want to print the application and version, OS, and interface for starters. The Section Header Block and the Interface Description Block contain the data I need.

My problem is the blocks/fields are not at a fixed size because of the Options field in each block:
PCAPNG format, See section 3.1 and 3.2

Questions:

1.) Are there any Python libraries that print that information?
2.) If not, are there any ways through Python that information could be easily grabbed

Thanks in advance.

Upvotes: 1

Views: 2148

Answers (1)

netresec
netresec

Reputation: 196

There are no such libraries, you will have to write your own parser for the PCAPNG Section Header Blocks.

Another option is to implement code to do a HTTP POST of the PCAPNG file to pcapng.com and parse the extracted metadata from the HTML result.

Upvotes: 1

Related Questions