I'm looking to analyze packets via scripts. I'd like to use something high level. I'm in a mac/linux environment. I'm currently looking at different python+libpcap libraries. Perhaps lua+wireshark too. Maybe tcpdump+bash (but not sure that has alot of info i can use). I also heard good things about scapy. Not sure.

I'm wondering if you have any recommendations? There's quite a few of them out there. What have you found that works best? I'd definitely want something scriptable not something that I need to compile (like c/c++, etc)

link|improve this question
feedback

2 Answers

shameless plug: my Lua libpcap binding

link|improve this answer
no shame there, good job! – yungin Nov 27 '10 at 3:53
feedback

I'm not sure if it goes deep enough for your needs, but grabbing the stdout of wiresharks little bro TSHARK has worked for me in the past. It's got some very powerful statistical options:

http://www.wireshark.org/docs/man-pages/tshark.html

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.