Scapy PcapReader and packets time

python capture pcap packet-capture scapy
auino picture auino · Nov 7, 2012 · Viewed 13.9k times · Source

I'm reading a PCAP file using Scapy using a script such as the (semplified) following one:

#! /usr/bin/env python
from scapy.all import *
# ...
myreader = PcapReader(myinputfile)
for p in myreader:
    pkt = p.payload
    print pkt.time

In this case the packets time is not relative to PCAP capture time, but starts from the instant I've launched my script. I'd like to start from 0.0 or to be relative to the PCAP capture.

How can I fix it (possibly without "manually" retrieving the first packet time and repeatedly using math to fix the problem)?

Answer

auino picture auino · Nov 7, 2012

I saw that using pkt.time is wrong, in this case.
I should print p.time instead.

Related questions

How to capture stdout output from a Python function call?

I'm using a Python library that does something to an object do_something(my_object) and changes it. While doing so, it prints some statistics to stdout, and I'd like to get a grip on this information. The proper solution …

Read More
How do I list all files of a directory?

How can I list all files of a directory in Python and add them to a list?

Read More
Iterating over dictionaries using 'for' loops

I am a bit puzzled by the following code: d = {'x': 1, 'y': 2, 'z': 3} for key in d: print key, 'corresponds to', d[key] What I don't understand is the key portion. How does Python recognize that it needs only to …

Read More