scapy get packet's arrivals time

python packet-sniffers scapy
leong picture leong · Jul 23, 2012 · Viewed 12.9k times · Source

Is there a way to get the packet's arrivals time using scapy? Using scapy to read the pcap file and I want to know all the packet's arrivals time because as we know wireshark can see it. So I guess there must be a way. Anyone know?

Answer

Mike Pennington picture Mike Pennington · Jul 29, 2012

use pkt.time

[mpenning@tsunami icinga-1.7.1]$ sudo python
[sudo] password for mpenning:
Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48)
[GCC 4.4.5] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> from scapy.all import sniff
WARNING: No route found for IPv6 destination :: (no default route?)
>>> pkts = sniff(iface='eth0')
^C>>>
>>> pkts
<Sniffed: TCP:2 UDP:8 ICMP:0 Other:4>
>>> for pkt in pkts:
...     print pkt.time
...
1343551962.73
1343551963.28
1343551963.28
1343551963.32
1343551963.32
1343551963.36
1343551963.4
1343551963.45
1343551963.55
1343551963.65
1343551963.75
1343551963.85
1343551963.85
>>>

Related questions

Scapy packet sniffer triggering an action up on each sniffed packet

I'm using scapy with python to sniff live traffic. capture=sniff(iface="<My Interface>", filter="tcp") But this sniffs each packet and adds it to the list capture which can be processed later. I want to process a …

Read More
sniff traffic on a particular port using scapy

Ok so I have client and a server code. The server code looks like this : import socket import sys HOST = '' PORT = 5555 s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) print 'Socket created' #Bind socket to local host and …

Read More
Python stop sniffing upon specific condition

I found some questions regarding an object deleting itself. But nowhere mentioned a suitable example where such action is required. But take the below example. from scapy.all import * class x(): def me(self): self.i=0 sniff(iface="em1", filter=…

Read More