fredrikappelros / pcap-reassembler Goto Github PK

Hello Fredrik,

I am using your very interesting library to parse http traffic (see below). I have noticed that the timestamp and number are from the first fragment. Is it difficult to find back the ts and number of the last fragment which is more representative for a delay measurement ?

Thanks in advance,

Erwin Sprengers

r = PcapReassembler()
messages = r.load_pcap('y.pcap')
for message in messages:
#do something

Hello!
Somehow I'm getting an error during packet reassembly. The application is failing during the following method call:

p = pcap.pcapObject()

The exception is: "'module' object has no attribute 'pcapObject'". I double-checked the import of pcap packet, but it's not working. Do you have any idea how to get rid of this problem?

Edit: There seems to be a conflict between the "pypcap" and "pylibpcap" package. After uninstalling "pypcap" the code runs again. Funny: Both packages were installed a few weeks ago and it ran without any problems. Strange behavior.

import libpcap

from pcap_reassembler import PcapReassembler, address_to_string
reassembler = PcapReassembler()
messages = reassembler.load_pcap('http.cap')
msg = messages[0]
msg.payload

NameError: name 'pcap' is not defined

Is there any dependent I do not imported?