blob: 0446cb961deba87501abc67f71fc37ec9652b575 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
import os
from scapy.all import *
from scapy.layers.inet import IP
class ReadPcap():
def __init__(self, path_dict):
self.traffic_playback_workpath = path_dict["traffic_playback_workpath"]
self.pcap_path = os.path.join(self.traffic_playback_workpath, "traffic_pcap")
def get_info(self, file_name):
"""
获取数据包 包数、字节数统计信息
:param file_name:
:return:
"""
# 字节和包数统计变量
pcap_info_dict = {
"total_packets" : 0,
"total_packets_sent": 0,
"total_packets_received": 0,
"total_bytes": 0,
"total_bytes_sent": 0,
"total_bytes_received": 0,
"total_syn_pkt": 1
}
file_abspath = os.path.join(self.pcap_path, file_name)
packets = rdpcap(file_abspath)
# 定义第一个包方向
src_ip = packets[0]["IP"].src
dst_ip = packets[0]["IP"].dst
# 计算包数和字节数
for pkt in packets:
ip_layer: IP = pkt["IP"]
pkt_length = len(pkt)
if pkt_length < 60: # 数据包长度小于60，按60计算
pkt_length = 60
# 根据方向判断字节数和包数
if ip_layer.src == src_ip:
pcap_info_dict["total_packets"] += 1
pcap_info_dict["total_packets_sent"] += 1
pcap_info_dict["total_bytes"] += pkt_length
pcap_info_dict["total_bytes_sent"] += pkt_length
else:
pcap_info_dict["total_packets"] += 1
pcap_info_dict["total_packets_received"] += 1
pcap_info_dict["total_bytes"] += pkt_length
pcap_info_dict["total_bytes_received"] += pkt_length
print(pcap_info_dict)
return pcap_info_dict
|
