0

I'm looking to analyze packets via scripts. I'd like to use something high level. I'm in a mac/linux environment. I'm currently looking at different python+libpcap libraries. Perhaps lua+wireshark too. Maybe tcpdump+bash (but not sure that has a lot of info i can use). I also heard good things about scapy. Not sure.

I'm wondering if you have any recommendations? There's quite a few of them out there. What have you found that works best? I'd definitely want something scriptable not something that I need to compile (like c/c++, etc)

2 Answers 2

1

shameless plug: my Lua libpcap binding

1
  • no shame there, good job!
    – yungin
    Nov 27, 2010 at 3:53
0

I'm not sure if it goes deep enough for your needs, but grabbing the stdout of wiresharks little bro TSHARK has worked for me in the past. It's got some very powerful statistical options:

http://www.wireshark.org/docs/man-pages/tshark.html

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .