If you're wanting to get more than just the summary info out of the capture packets then you're in the right place. but wait, there's more?!? Full Packet Attributes There's a lot that you can do with just these items printing out packet summaries is just the beginning! Great visual charts can be made to illustrate IP conversations, bandwidth usage, protocol breakdowns, and application performance measurements (round-trip-times in the same TCP stream).
The most useful attributes available are: > cap = pyshark.FileCapture (' test.pcap ', only_summaries=True) Setting only_summaries to True during capture will give us a fixed set of attributes, regardless of the protocols present in the packet. As stated in a previous post we have control for how much info about the packets we store in each packet option through the only_summaries argument in the LiveCapture and ReadCapture modules. These packet objects will have methods and attributes that give us access to the header and payload info of each packet.
When we have captured packets in a capture object, they are stored as a list of packet objects. So far in this series we've done a lot with capturing packets and working with the capture object, but finally we're going to get to the fun part and finally start playing with some PACKETS!!!!
0 kommentar(er)
