【无标题】

from scapy.all import *
from scapy.layers.inet import *
def pcap_to_txt (filename):
packet=rdpcap(filename)
list1=‘’
for item in packet:
#print(item.show())
#print (item[IP].proto)
#if item.haslayer(“Ethernet”):
#if item.haslayer(“TCP”):
# if str(item[TCP].flags) == ‘SA’:
#list1 += str(item[‘Ethernet’].dst)+‘\t’+item[IP].src+‘\t’+item[IP].dst+‘\t’+str(item[IP].len)+‘\t’+str(item[TCP].dport)+‘\t’+str(item[TCP].flags)+‘\n’
list1 += item[IP].src + ‘,’ + item[IP].dst + ‘,’ + str(item[IP].len)+ ‘\n’

print(list1)
with open(filename+'.csv','a+') as f:

    f.write(list1)

pcap_to_txt(“1010-icmp.pcap”)