http - Extract TCP payload from pcap file -


using tcpdump, capturing network traffic. interested in extracting actual tcp payload data, i.e. http traffic in particular case.

i tried achieve using scapy, found function remove_payload(). there corresponding counterpart? or know of other tools provide such functionality?

unfortunately, did not find satisfactory scapy documentation.

you can read pcap scapy rdpcap, can use raw (right above tcp) layer of packets play http content:

from scapy.all import *  pcap = rdpcap("my_file.pcap")  pkt in pcap:     if raw in pkt:         print pkt[raw] 

Comments

Popular posts from this blog

Failed to execute goal org.apache.maven.plugins:maven-surefire-plugin:2.12:test (default-test) on project.Error occurred in starting fork -

windows - Debug iNetMgr.exe unhandle exception System.Management.Automation.CmdletInvocationException -

configurationsection - activeMq-5.13.3 setup configurations for wildfly 10.0.0 -