Issue 51 in dpkt: Snoop file parser

[dp...@googlecode.com]

Status: New
Owner: ----
Labels: Type-Defect Priority-Medium

New issue 51 by keisuke.nishimoto: Snoop file parser
http://code.google.com/p/dpkt/issues/detail?id=51

I needed to parse packet capture files created by Solaris snoop command and
I wrote a snoop file parser, which works mostly in the same way as the
existing pcap.py. Currently it supports only the Ethernet format. I took
the constants from snoop.h in OpenSolaris.

The snoop file format is described in RF1761.

Attachments:
snoop.py 2.9 KB

[dp...@googlecode.com]

Comment #1 on issue 51 by dugsong: Snoop file parser
http://code.google.com/p/dpkt/issues/detail?id=51

Thanks - committed, and added you to AUTHORS :-)

[dp...@googlecode.com]

Updates:
Status: Fixed

Comment #2 on issue 51 by dugsong: Snoop file parser
http://code.google.com/p/dpkt/issues/detail?id=51

(No comment was entered for this change.)

[dp...@googlecode.com]

Comment #3 on issue 51 by xuedipia...@gmail.com: Snoop file parser
http://code.google.com/p/dpkt/issues/detail?id=51

The lasted build doesn't include the snoop.py file. I downloaded it from
svn. But I don't know how to use it? Could you give me some examples?

[dp...@googlecode.com]

Comment #4 on issue 51 by xuedipia...@gmail.com: Snoop file parser
http://code.google.com/p/dpkt/issues/detail?id=51

Yeah. It works on snoop file.

[dp...@googlecode.com]

Comment #5 on issue 51 by keisuke....@gmail.com: Snoop file parser
http://code.google.com/p/dpkt/issues/detail?id=51

I noticed __init__.py does not include a line "import snoop". Suppose it
is added, you can read packets from a snoop file in the same way as pcap:

from dpkt import ethernet, snoop

f = file("packet.snoop", "rb")
for ts, buf in snoop.Reader(f):
eth = ethernet.Ethernet(buf)

[dp...@googlecode.com]

Comment #6 on issue 51 by vinifa...@gmail.com: Snoop file parser
https://code.google.com/p/dpkt/issues/detail?id=51

Thank you! It works fine!!!

--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings