Stream PCAP File Extractor

pcapkit is an independent open source library, using only DictDumper as its formatted output dumper.

There is a project called jspcapy works on pcapkit, which is a command line tool for PCAP extraction.

Unlike popular PCAP file extractors, such as Scapy, DPKT, PyShark, and etc, pcapkit uses streaming strategy to read input files. That is to read frame by frame, decrease occupation on memory, as well as enhance efficiency in some way.

• Library Foundation
  • Analyser for Application Layer
  • Extractor for PCAP Files
  • Trace TCP Flows
• User Interface
  • PCAP Extration
  • Application Layer Analysis
  • Payload Reassembly
  • TCP Flow Tracing
  • Output File Formats
  • Layer Thresholds
  • Extration Engines
• Protocol Family
  • PCAP File Headers
  • Link Layer Protocols
  • Internet Layer Protocols
  • Transport Layer Protocols
  • Application Layer Protocols
  • Miscellaneous Protocols
  • Base Protocol
• Reassembly Packets & Datagrams
  • Fragmented Packets Reassembly
  • IP Datagram Reassembly
  • IPv4 Datagram Reassembly
  • IPv6 Datagram Reassembly
  • TCP Datagram Reassembly
• Core Utilities
  • Info Class
  • Protocol Chain
  • Version Info
• Dump Utilities
  • PCAP Dumper
  • Undefined Dumper
• Compatibility Tools
  • Default (PyPCAPKit) Tools
  • DPKT Tools
  • PyShark Tools
  • Scapy Tools
• Utility Functions & Classes
  • Decorator Functions
  • User Defined Exceptions
  • Validation Utilities
  • User Defined Warnings
• Constant Enumerations
  • ARP Constant Enumerations
  • FTP Constant Enumerations
  • HIP Constant Enumerations
  • HTTP Constant Enumerations
  • IPv4 Constant Enumerations
  • IPv6 Constant Enumerations
  • IPX Constant Enumerations
  • MH Constant Enumerations
  • OSPF Constant Enumerations
  • Protocol Type Registry Constant Enumerations
  • TCP Constant Enumerations
  • VLAN Constant Enumerations
• Web Crawlers for Constant Enumerations
  • ARP Vendor Crawlers
  • FTP Vendor Crawlers
  • HIP Vendor Crawler
  • HTTP Vendor Crawler
  • IPv4 Vendor Crawler
  • IPv6 Vendor Crawler
  • IPX Vendor Crawler
  • MH Vendor Crawler
  • OSPF Vendor Crawler
  • Protocol Type Registry Vendor Crawlers
  • TCP Vendor Crawler
  • VLAN Vendor Crawler
  • Base Generator
  • Command Line Tool

In pcapkit, all files can be described as following eight different components.

• Interface (pcapkit.interface)

  user interface for the pcapkit library, which standardise and simplify the usage of this library

• Foundation (pcapkit.foundation)

  synthesise file I/O and protocol analysis, coordinate information exchange in all network layers

• Reassembly (pcapkit.reassembly)

  base on algorithms described in RFC 815, implement datagram reassembly of IP and TCP packets

• Protocols (pcapkit.protocols)

  collection of all protocol family, with detailed implementation and methods

• Utilities (pcapkit.utilities)

  collection of utility functions and classes

• CoreKit (pcapkit.corekit)

  core utilities for pcapkit implementation

• ToolKit (pcapkit.toolkit)

  utility tools for pcapkit implementation

• DumpKit (pcapkit.dumpkit)

  dump utilities for pcapkit implementation

Library Index

pcapkit has defined various and numerous functions and classes, which have different features and purposes. To make a simple index for this library, pcapkit.all contains all things from pcapkit.