Parsing interface details from .pcap file in python

Asked Jan 28 '19 at 20:43

Active Jan 28 '19 at 20:46

Viewed 177 times

I have a .pcap file and I am trying to extract the interface and its admin status from this output. Which python module should I use? I have tried pypcapfile and had no luck figuring it out. I also tried dpkt but I am not able to use the correct handler to extract interface details.

My dpkt reader o/p is:

edited Jan 28 '19 at 20:46

Barmar

741,623
53
500
612

asked Jan 28 '19 at 20:43

Prarthana Shedge

Why would you expect to find interface status in a .pcap file? It's a packet capture, it just shows the data that sent or received. – Barmar Jan 28 '19 at 20:47
Well actually, it an SNMPv2c Trap message. The trap message is for interface status change. I need to get that trap message. – Prarthana Shedge Jan 28 '19 at 20:56
So you want the message `Interface FastEthernet1/0, changed state to up`? – Barmar Jan 28 '19 at 20:57
Yes exactly! But I don't know how to extract that message in dpkt or any pcap python parsing module. – Prarthana Shedge Jan 28 '19 at 21:01

Parsing interface details from .pcap file in python

0 Answers0