Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.python > #37406

Re: Parse a Wireshark pcap file

Path csiph.com!newsfeed.hal-mli.net!feeder3.hal-mli.net!newsfeed.hal-mli.net!feeder1.hal-mli.net!newsfeed.xs4all.nl!newsfeed1.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path <d@davea.name>
X-Original-To python-list@python.org
Delivered-To python-list@mail.python.org
X-Spam-Status OK 0.007
X-Spam-Evidence '*H*': 0.99; '*S*': 0.00; 'importerror:': 0.05; 'linux,': 0.05; 'matches': 0.07; 'subject:file': 0.07; 'craft': 0.09; 'fails.': 0.09; 'get.': 0.09; 'cc:addr:python-list': 0.10; 'osx': 0.16; 'wrote:': 0.17; 'thanks,': 0.18; 'module': 0.19; 'versions': 0.20; 'trying': 0.21; 'import': 0.21; 'parse': 0.22; 'password.': 0.22; 'cc:2**0': 0.23; 'kevin': 0.23; 'installed': 0.23; "i've": 0.23; 'idea': 0.24; 'machine': 0.24; 'tried': 0.25; 'cc:addr:python.org': 0.25; 'header:In-Reply-To:1': 0.25; 'header :User-Agent:1': 0.26; 'then.': 0.27; 'run': 0.28; 'post': 0.28; 'worked': 0.30; 'mac': 0.32; 'could': 0.32; 'extract': 0.33; 'traceback': 0.33; 'anyone': 0.33; 'version': 0.34; 'changed': 0.34; 'screen': 0.34; 'filter': 0.35; 'doing': 0.35; 'pm,': 0.35; 'there': 0.35; 'but': 0.36; 'well.': 0.37; 'data': 0.37; 'subject:: ': 0.38; 'received:192': 0.39; 'received:192.168': 0.40; 'matter': 0.61; 'here:': 0.62; 'times': 0.63; 'more': 0.63; 'here': 0.65; 'received:74.208': 0.71; 'goal': 0.74; 'clearer': 0.84; 'died.': 0.84; 'to:none': 0.93
Date Tue, 22 Jan 2013 22:29:20 -0500
From Dave Angel <d@davea.name>
User-Agent Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130106 Thunderbird/17.0.2
MIME-Version 1.0
CC "python-list@python.org" <python-list@python.org>
Subject Re: Parse a Wireshark pcap file
References <CAN4UfGzwzHJvpY=Er2B2otZMBm=8eVA6FDGejJbirXLZFTXvsg@mail.gmail.com> <50FF5312.50309@davea.name> <CAN4UfGzBv=OjNZy-+_jzZHuWhP44FmcBa_O5pT01QDFkvLGOOw@mail.gmail.com>
In-Reply-To <CAN4UfGzBv=OjNZy-+_jzZHuWhP44FmcBa_O5pT01QDFkvLGOOw@mail.gmail.com>
Content-Type text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding 7bit
X-Provags-ID V02:K0:CoizcK0DBPrjEUOLIu6iUhys2bZo4RkGlEPwv4Ebapb BlZaenm+c86QaC2fBPkJqdU9wjqjSTpkrPlWJp/RiFMzjgl2lK ng+DdP0sNNWlrV/R+D7bAQvAybruB69XEWV5MLzjjtCMSEyT38 VDS2qmxVZfJLFc2f2KIs9RFVejEV7YsZOSmp2v0C4PKO9wia7E ROZzjoXSFZfRevMlNcaZ1dpFhcrCida6gtGUCtkaHIbU/k7Pkv YvBqmd0fQGEPt0JEBH7ygT5tXSeMCSmLpFKCT9JeVFjJG3h/CL m8laqaCULgHgrC1LoJcT8Lsi7I5txUFvUZGmzgnfHRRPMMROA= =
X-BeenThere python-list@python.org
X-Mailman-Version 2.1.15
Precedence list
List-Id General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe <http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive <http://mail.python.org/pipermail/python-list/>
List-Post <mailto:python-list@python.org>
List-Help <mailto:python-list-request@python.org?subject=help>
List-Subscribe <http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups comp.lang.python
Message-ID <mailman.859.1358911787.2939.python-list@python.org> (permalink)
Lines 37
NNTP-Posting-Host 2001:888:2000:d::a6
X-Trace 1358911787 news.xs4all.nl 6882 [2001:888:2000:d::a6]:48625
X-Complaints-To abuse@xs4all.nl
Xref csiph.com comp.lang.python:37406

Show key headers only | View raw


On 01/22/2013 10:15 PM, Kevin Holleran wrote:
> Thanks, I have been trying to get it to work but I am on Mac OS 10.8.2.  I
> tried to get it from Macports and download/install it myself.  Both seem to
> get me to here:
>
> ImportError: No module named dnet
>
> I tried to download libdnet but no matter what I do this is what I get.
>   Granted I am doing;
>
> from scapy.all import *
>
>
> But I have no idea what I need.  I am not trying to craft packets but
> filter packets based on tcp.dstport 80 & frame matches signin.aspx.  Then
> my goal is to parse the data looking for post vars txtUserId & txtPwd and
> extract them, dumping them to the screen as userid_value => password.
>

I've never worked on Mac OSx   And the only times I had and used scapy 
were on a work machine that's long gone.  I still run Linux, but 
versions of everything have changed since then.

I don't know if there's anyone here that's more current with scapy 
and/or with Mac, but in case there is, you could be lots clearer about 
what you're doing and how it fails.

Version of OS.  You said that well.
Version of Python,.
Exact location you got scapy from, what version it was
How you installed it (I don't know Macports, clearly)
What the full traceback was when it died.



-- 
DaveA

Back to comp.lang.python | Previous | Next | Find similar | Unroll thread


Thread

Re: Parse a Wireshark pcap file Dave Angel <d@davea.name> - 2013-01-22 22:29 -0500

csiph-web