Mentor or Guide needed for Python code to run extcap programs outside Wireshark

Me and my team are going to create an ExtCap library for python as part of our contribution to the Open Source Community. But we are facing a lot of problem understanding the pillars on which ExtCap stands on as we are only 3rd Year UG CSE students. Is there anybody who can resolve our doubts or guide us through the basics of network capturing. Thank you. This is the link for the idea: https://github.com/open-source-ideas/...

Comments

Note: in this case, an "ExtCap library for python" means "code that allows Python programs to run extcap programs, independently of Wireshark, to allow them to capture traffic and respond to it". Think of it as a Python equivalent of libpcap, but for extcap programs, performing a similar function to the code in Wireshark that runs extcap programs.

Guy Harris (2020-08-16 18:47:22 +0000) edit

add a comment see more comments

Extcap is an interface specification that allows Wireshark to configure and control an external utility, a script or a binary) to produce a pcap stream over a pipe that represents data captured from some source other than a "standard" network interface.

The documentation includes the extcap man page and code in the Wireshark source code tree which includes the extcap_example.py script the extcap headers; extcap.c and extcap.h and the files in the extcap directory.

23.8k

grahamb

answered 2020-08-13 16:56:37 +0000

edit flag offensive 0 remove flag delete link

Comments

Thank you so much! This was very helpful.

pycoder2000 (2020-08-13 17:05:47 +0000) edit

@pycoder2000 If an answer has solved your issue, please accept it for the benefit of others that may have the same query by clicking the checkmark icon to the left of the answer.

grahamb (2020-08-14 07:40:55 +0000) edit

See also chapter 8.2 "Extcap: Developer's Guide" in the Wireshark Developer's Guide, which shows examples of the command-line arguments, and standard output, that an extcap program/script should have.

Guy Harris (2020-08-15 05:22:16 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Mentor or Guide needed for Python code to run extcap programs outside Wireshark edit

Comments

1 Answer

Comments