Mastering Python for Networking and Security

Introduction to the PCAP format

By analogy, the information captured using this technique is stored in a file with the .pcap extension. This file contains frames and network packets and is very useful if we need to save the result of a network analysis for later processing.

These files are very useful if we need to save the result of a network analysis for later processing or as evidence of the work done.The information stored in a .pcap file can be analyzed as many times as we need without the original file being altered.

Scapy incorporates two functions to work with PCAP file, which will allow us to read and write about them:

• rdcap (): Reads and loads a .pcap file.
• wdcap (): Writes the contents of a list of packages in a .pcap file.