python3 利用scapy抓取网卡数据包并保存pcap

用python scapy实现包的抓取，脚本如下

 

?

1 2 3 4 5 6 7 8 9 10 11 12

#coding=utf-8 from scapy.all import * count = input("Input catch tcp num:") now_time = datetime.now().strftime( "%Y%m%d%H%M%S" ) filename = "./pcap/email_dns_data_{0}.pcap".format(now_time) #filter = 'tcp.port == 2222' o_open_file= PcapWriter(filename, append=True) def callback(packet):     packet.show()     o_open_file.write(packet)     dpkt_input = sniff(iface = "Realtek PCIe GBE Family Controller",count = int(count),  filter='tcp',prn = callback)

　　sniff解释:

?

1

iface 网卡

?

1	filter 过滤条件，和wireshark 相同<br>count 抓包数量，0为永久抓包<br>prn 回调函数