#Python mac address parsing code#

ctypes.windll must be available.'Дef inet_pton(address_family, ip_string):ДЄddr_size = ctypes.c_int(ctypes.sizeof(addr)) WSAAddressToStringA = 2_32.WSAAddressToStringA WSAStringToAddressA = 2_32.WSAStringToAddressA _fields_ = [('sa_family', ctypes.c_short), Return ':'.join('%02x' % compat_ord(b) for b in address) '''Convert a MAC address to a readable/printable stringДЄddress (str): a MAC address in hex form (e.g. This example is focused on the fields in the Ethernet Frame and IP packet Use DPKT to read in a pcap file and print out the contents of the packets Print out the fields in the Ethernet frame and IP data packet. Use DPKT to read the pcap file and print out the contents of the packet. It is found that inet_pton cannot be used directly through query, and it is modified according to the solution on the Internet.

#Python mac address parsing code#

The following code is an example in the manual. In the manual, I found the sample code of some APIs in Github, which has reference value.

If you want to extend this source code, you need to learn the meaning of the protocol-related fields. If the API is found to match a certain protocol, the API will be output. The corresponding protocol has been encapsulated. Looking at the official manual, it is found that DPKT reads the content of each pcap package, uses isinstance to determine whether there is an IP package, and then determines which protocol it belongs to. However, I found that it was not as convenient as using scapy to check the information and study.Дpkt is a python module that can create/parse simple data packets and parse basic TCP/IP protocols at a very fast speed. I wanted to use dpkt to analyze mail, dns, and http to assist in analyzing pcap packets.