github-mirrors/pyPLC
1
0
Fork 0
mirror of https://github.com/uhi22/pyPLC.git synced 2024-11-20 01:13:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

feature: pcapConverter runs over all pcap in directory

Browse source
This commit is contained in:
uhi22 2023-04-18 00:28:32 +02:00
parent f50e99c753
commit 4a8dbe2d4e
1 changed files with 45 additions and 29 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

74
pcapConverter.py
View file

@ -12,34 +12,50 @@
import pyshark
import exiConnector
import os
inputFileName = "efcaec23.pcap"
cap = pyshark.FileCapture(inputFileName, display_filter="ipv6")
fileOut = open(inputFileName + '.decoded.txt', 'w')
#print(cap)
#print(cap[0])
#print(cap[1])
#print(dir(cap[1]))
#print(cap[1].sniff_time) # readable time
#print(cap[1].sniff_timestamp) # epoch time
numberOfPackets=0
for packet in cap:
numberOfPackets+=1
#print(packet)
if 'TCP' in packet:
#print(packet.tcp.field_names)
if ('payload' in packet.tcp.field_names):
tcppayload = packet.tcp.payload # this gives a string of hex values, separated by ":", e.g. "01:fe:80:01"
s = tcppayload.replace(":", "") # remove colons
if (s[0:8]=="01fe8001"):
# it is a V2GTP header with EXI content
strExi = s[16:] # remove V2GTP header (8 bytes, means 16 hex characters)
sHeader = "Packet #" + str(numberOfPackets) + " [" + str(packet.sniff_time) + "] " + strExi + " means:"
pre = "DD" # decode DIN
decoded=exiConnector.exiDecode(strExi, pre)
print(sHeader)
print(decoded)
print(sHeader, file=fileOut)
print(decoded, file=fileOut)
fileOut.close()
def convertPcapToTxt(inputFileName):
cap = pyshark.FileCapture(inputFileName, display_filter="ipv6")
fileOut = open(inputFileName + '.decoded.txt', 'w')
#print(cap)
#print(cap[0])
#print(cap[1])
#print(dir(cap[1]))
#print(cap[1].sniff_time) # readable time
#print(cap[1].sniff_timestamp) # epoch time
numberOfPackets=0
for packet in cap:
numberOfPackets+=1
#print(packet)
if 'TCP' in packet:
#print(packet.tcp.field_names)
if ('payload' in packet.tcp.field_names):
tcppayload = packet.tcp.payload # this gives a string of hex values, separated by ":", e.g. "01:fe:80:01"
s = tcppayload.replace(":", "") # remove colons
if (s[0:8]=="01fe8001"):
# it is a V2GTP header with EXI content
strExi = s[16:] # remove V2GTP header (8 bytes, means 16 hex characters)
sHeader = "Packet #" + str(numberOfPackets) + " [" + str(packet.sniff_time) + "] " + strExi + " means:"
pre = "DD" # decode DIN
decoded=exiConnector.exiDecode(strExi, pre)
print(sHeader)
print(decoded)
print(sHeader, file=fileOut)
print(decoded, file=fileOut)
fileOut.close()
# assign directory
directory = '../temp'
# iterate over files in
# that directory
for filename in os.listdir(directory):
f = os.path.join(directory, filename)
# checking if it is a file
if os.path.isfile(f):
print(f)
if (f[-5:]==".pcap") or (f[-7:]==".pcapng"):
strFileNameWithPath = f
print("Will decode " + strFileNameWithPath)
convertPcapToTxt(strFileNameWithPath)