Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm looking to analyze packets via scripts. I'd like to use something high level. I'm in a mac/linux environment. I'm currently looking at different python+libpcap libraries. Perhaps lua+wireshark too. Maybe tcpdump+bash (but not sure that has a lot of info i can use). I also heard good things about scapy. Not sure.

I'm wondering if you have any recommendations? There's quite a few of them out there. What have you found that works best? I'd definitely want something scriptable not something that I need to compile (like c/c++, etc)

share|improve this question

2 Answers 2

shameless plug: my Lua libpcap binding

share|improve this answer
    
no shame there, good job! –  yungin Nov 27 '10 at 3:53

I'm not sure if it goes deep enough for your needs, but grabbing the stdout of wiresharks little bro TSHARK has worked for me in the past. It's got some very powerful statistical options:

http://www.wireshark.org/docs/man-pages/tshark.html

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.