Stack Overflow
Stack Overflow

Questions tagged [pyshark]

PyShark is a Python wrapper allowing packet parsing using Wireshark dissectors. This package allows parsing from a capture file or a live capture, using all installed Wireshark dissectors.

PyShark is a Python wrapper allowing packet parsing using Wireshark dissectors. This package allows parsing from a capture file or a live capture, using all installed Wireshark dissectors.

189 questions
0
votes
1 answer

Read Multiple files one by one and extract the content based on different variables for each file

I'm new to python i have set for Pcap files in a directory. i should read each file and extract the required data based on differnt variable for each file. i'm using pyshark for parsing pcap. i have to take csv file column as an input for each…
Darshan Mahalinge Gowda
  • 174
  • 7
0
votes
2 answers

How to I specify fields in pyshark?

I am getting different results in Tshark and Pyshark when I think the results should be the same. When using Tshark, it is easy to specify the fields you want by saying using "-e (field name)". Pyshark has an option to specify custom parameters and…
3cheezepizza
  • 1
  • 1
0
votes
1 answer

How to capture wifi packets with a specific channel using Pyshark?

I use codes below to capture wifi packets, and save the pcap file to a text file. However in the text file it only shows packets with channel 1, even no channel 2 or more. I'm using python2.7 and pyshark-0.3.8 . capture =…
Jacky
  • 316
  • 3
  • 10
0
votes
1 answer

getting raw layer content using pyshark

How can I get the raw layer using pyshark? For example if a packet has a DNS layer, I would like to get the content of all the feilds in the DNS layer. enter image description here
Jonathan
  • 1
  • 2
0
votes
1 answer

pyshark.LiveCapture not capturing packets on Raspberry Pi

I'm trying to get pyshark version 0.4.2.9 on my raspberry pi 3B and cannot capture any packets using LiveCapture. Strangely enough the following commands run perfectly fine on my desktop (both devices have the same USB wifi adapter) but will always…
dropTableUsers
  • 345
  • 4
  • 14
0
votes
0 answers

module 'pyshark' has no attribute 'Filecapture'

I am trying to use pyshark and I am fairly new to the field. But I am encountering this error " module 'pyshark' has no attribute 'Filecapture' ", Even though I am importing pyshark, I am getting the same error, I have even tried running it with…
Arnab Mondal
  • 1
0
votes
1 answer

Getting the "To" and "From" fields from a SMTP packet using pyshark

How can i get the "To" and "From" categories from a SMTP packet isolated from a stream. import pyshark fileBuffer = pyshark.FileCapture(pcapDirectory) samplePacket = fileBuffer[SMTP_Packet_Location] # Get to and from fields
Ruxaroh -
  • 1
  • 2
0
votes
0 answers

Hide popup windows in pyshark.filecapture

I am getting 2 tshark.exe popup windows while executing FileCapturecode below. Can someone let me know how to hide those windows? import pyshark import binascii import struct cap = pyshark.FileCapture(r"C:\Users\step16.pcapng", display_filter=…
Nedunchezhiapandian Narayanan
  • 11
  • 2
0
votes
1 answer

Trouble importing pyshark module

My current project involves receiving data packets from an external IP device and displaying/using the data with python. I am currently trying to use pyshark to extract this data, but am running into the error message 'no module named pyshark.' I…
AcePilotWarhawk
  • 41
  • 1
  • 4
0
votes
1 answer

Python pyshark with use_json=True fails to print JSON

I'm using pyshark and are trying to print out JSON. This is my code: import pyshark import json capture = pyshark.LiveCapture(interface='eth0', bpf_filter='http', use_json=True) for packet in capture.sniff_continuously(packet_count=10): …
Alfred Balle
  • 1,135
  • 4
  • 16
  • 32
0
votes
2 answers

pyshark Cannot access data regarding packet

I am trying to convert a .pcap file into an CSV file using PyShark. I want to print all of the data about the first packet of my pcap file. Code import pyshark cap = pyshark.FileCapture('test.pcap') print(cap[0]) Error ValueError: I/O operation on…
Lyra Orwell
  • 1,048
  • 4
  • 17
  • 46
0
votes
1 answer

Packet layer field value information

Is there a way to get the packet's layer field value information ? (i.e. The string info displayed to the right when printing the packet layer) like the lines below: Protocol discriminator: Mobility Management message Skip Indicator: No indication…
Popa
  • 273
  • 1
  • 4
  • 13
0
votes
1 answer

pyshark Live Capture with wrong display_filter argument

I am running live capture with pyshark module: filtered_cap = pyshark.LiveCapture(display_filter='TCPP', only_summaries=True) packet_iter = filtered_cap.sniff_continuously() for pkt in packet_iter: print(pkt) The display filter argument is…
Popa
  • 273
  • 1
  • 4
  • 13
0
votes
1 answer

Improving packet sniffing/monitoring on raspberry pi

I have several raspberry pi's that are all the same model with the same build of raspbian and running the same code where I am simply using pyshark to sniff out probe requests and record them to a log file. I can have 5 identical raspberry pi's…
KS_MVP
  • 11
  • 1
0
votes
0 answers

Understanding pyshark output

Documentation of pyshark module is very modest. Can you help me with understanding basic ouput of my code? import pyshark capture = pyshark.LiveCapture(interface='eno1') for packet in capture.sniff_continuously(packet_count=1): if…
dzudzitsu
  • 35
  • 3
1 2 3
…
12 13