Use the scapy library in Python to read the file captured by Wireshark and then rewrite it into a new pacp file. After opening it again with Wireshark, some fields cannot be displayed.

This is code written in Python

from scapy.all import *

PKT_List = []
pkts = rdpcap("E:\test.pcap")
for pkt in pkts:
    PKT_List.append(pkt)

wrpcap("E:\output.pcap", pkts)

The first picture below is the original data packet, and the second picture is the data packet processed by python and then opened with Wireshark.

enter image description here

enter image description here

0

There are 0 best solutions below