Split pcap to multiple files based on number of packets


Here is a script that can use tshark to split a large pcap to multiple small pcaps  inpcap="test.pcap" max=$(tshark -r $inpcap -n -T fields -e frame.number|tail -1) # This is the number of packets in …

scapy packet dump to packet


First you need to have scapy installed. And if you don’t know about scapy, then […] Scapy is a powerful interactive packet manipulation program. It is able to forge or decode packets of a wide …

This website uses cookies to ensure you get the best experience on our website. Learn more Got it