http - Extract TCP payload from pcap file -
using tcpdump
, capturing network traffic. interested in extracting actual tcp payload data, i.e. http traffic in particular case.
i tried achieve using scapy
, found function remove_payload()
. there corresponding counterpart? or know of other tools provide such functionality?
unfortunately, did not find satisfactory scapy documentation.
you can read pcap scapy rdpcap
, can use raw
(right above tcp) layer of packets play http content:
from scapy.all import * pcap = rdpcap("my_file.pcap") pkt in pcap: if raw in pkt: print pkt[raw]
Comments
Post a Comment