How to verify if a packet in Scapy has a TCP layer

scapy
farfalla picture farfalla · Feb 28, 2014 · Viewed 8.1k times · Source

I want to know how can I verify that a packet I received from the sr1() function in Scapy contains a TCP layer, in order to do some treatment on the TCP flags.

Answer

RyPeck picture RyPeck · Feb 28, 2014

You have two options, the in operator is one.

>>> TCP in pkt
True
>>> if TCP in pkt:
...     # Handle TCP Flags

Packet objects in Scapy also have a function called haslayer().

>>> pkt = IP()/TCP()
>>> pkt.haslayer(TCP)
1
>>> pkt2 = IP()/UDP()
>>> pkt2.haslayer(TCP)
0
>>> Packet.haslayer.__doc__
'true if self has a layer that is an instance of cls. Superseded by "cls in self" syntax.'

Related questions

Running Scapy on Windows with Python 2.7

I like to use Scapy with Python v2.7 under Windows 7. How can I install the required module pypcap for Python 2.7? Will it be possible to make Python scripts depending on Scapy into standalone Windows applications using a distribution tool such …

Read More
How can I filter a pcap file by specific protocol using python?

I have some pcap files and I want to filter by protocol, i.e., if I want to filter by HTTP protocol, anything but HTTP packets will remain in the pcap file. There is a tool called openDPI, and it's …

Read More
Scapy packet sniffer triggering an action up on each sniffed packet

I'm using scapy with python to sniff live traffic. capture=sniff(iface="<My Interface>", filter="tcp") But this sniffs each packet and adds it to the list capture which can be processed later. I want to process a …

Read More