Scapy and Python Part 2 - Reading PCAPs

In Part, we create a pcap file and load it into Scapy with the rdpcap() function. Once loaded into Scapy you can examine the pcap with Scapy's built in commands/functions.

#read pcaps
scapy
p
len(p)
pkt = p[1000]
pkt
type(pkt)
dir(pkt)
lsc()
hexdump(pkt)
ls(pkt)

[erickdavidramirezmartinez]

This video is awesome, I thought pcap files were something more difficult to understand.

[saidouiazzane]

Thank you sir for your high level of professionalism. I really appreciate your courses about Scapy, that may help me in testing my NIDS.

[lightyagami-rkmy]

Thank you sir for this video from india

[Sr.Dourado]

Very interesting video. I have a question about rdpcap(), if I'm interested in reading the information contained in the layers above the transport layer, what methods would I use?

[TheLtrance]

How do you get the source ip, destination ip, port on packets that have SYN flag?

[jkepps]

Thank you for this series.
Quick question. Is there a method of using Scapy to compare two supposedly identical pcaps to determine differences like missing packets, out of order, modified packets, etc...

[barbararich]

I was able to run pkt = p{1} and pkt but they did not work SyntaxError: invalid syntax???? what am i doing wrong, I have my pcap file and i need all the info i can from it since i lost my wifi password and the bruteforceing didnt work

[rutherfordn]

My wire shark isn’t capturing packets...

[elikelik]

Hi. Do u have a good resource where I can read how to do transparent proxy on raspberry pi? Thanks in advance.

[peterrigo]

when i try read it throws error: "SyntaxError: (unicode error) 'unicodeescape' codec can't decode bytes in position 2-3: truncated escape"
im on windows hmm maybe something is wrongly installed??