Get all the layers in a packet

python scapy
krish7919 picture krish7919 · Nov 25, 2012 · Viewed 21.2k times · Source

How can I get a list of all the layers in scapy? Eg: Ether/IP/UDP/DNS or Ether/IP/TCP/HTTP. The only thing I can think of is to do a packet.summary() and parse the output, which seems very crude. I think there should be a method built-in, but cannot find any in the documentation. Any suggestions?

What I am trying to do is to iterate over all the fields of a specific protocol given by a user and display its values.

Update: What I am looking for exactly can be seen in wireshark: Open any capture, select a packet, and in the 'Frame' menu, one can see Protocols in frame: eth:ip:udp:data This is exactly what I am looking for in Scapy. I hope I am clearer now.

Answer

cronos picture cronos · Nov 25, 2012

Each additional layer is the payload of a packet, so you can iterate

def expand(x):
    yield x
    while x.payload:
        x = x.payload
        yield x

and then 

res = list(expand(packet))

I hope that is what you meant.

Related questions

Running Scapy on Windows with Python 2.7

I like to use Scapy with Python v2.7 under Windows 7. How can I install the required module pypcap for Python 2.7? Will it be possible to make Python scripts depending on Scapy into standalone Windows applications using a distribution tool such …

Read More
How can I filter a pcap file by specific protocol using python?

I have some pcap files and I want to filter by protocol, i.e., if I want to filter by HTTP protocol, anything but HTTP packets will remain in the pcap file. There is a tool called openDPI, and it's …

Read More
Scapy packet sniffer triggering an action up on each sniffed packet

I'm using scapy with python to sniff live traffic. capture=sniff(iface="<My Interface>", filter="tcp") But this sniffs each packet and adds it to the list capture which can be processed later. I want to process a …

Read More