pypcapkit

For any technical and/or maintenance information, please kindly refer to the Official Documentation.

The PyPCAPKit project is an open source Python program focus on network packet parsing and analysis, which works as a comprehensive PCAP file extraction, construction and analysis library.

The whole project supports Python 3.6 or later.

About

PyPCAPKit is a comprehensive Python-native network packet analysis library, with DictDumper as its formatted output dumper.

Unlike popular PCAP file extractors, such as Scapy, DPKT, PyShark, and etc, pcapkit is designed to be much more comprehensive, which means it is able to provide more detailed information about the packet, as well as a more Pythonic interface for users to interact with.

Module Structure

In pcapkit, all files can be described as following eight parts.

Interface (pcapkit.interface)

User interface for the pcapkit library, which standardises and simplifies the usage of this library.
Foundation (pcapkit.foundation)

Synthesises file I/O and protocol analysis, coordinates information exchange in all network layers, as well as provides the foundamental functions for pcapkit.
Protocols (pcapkit.protocols)

Collection of all protocol family, with detailed implementation and methods.
Utilities (pcapkit.utilities)

Auxiliary functions and tools for pcapkit.
CoreKit (pcapkit.corekit)

Core utilities for pcapkit implementation, mainly for internal data structure and processing.
ToolKit (pcapkit.toolkit)

Auxiliary tools for pcapkit to support the multiple extraction engines with a unified interface.
DumpKit (pcapkit.dumpkit)

File output formatters for pcapkit.
Constants (pcapkit.const)

Constant enumerations used in pcapkit for protocol family extraction and representation.

Engine Comparison

Due to the general overhead of pcapkit, its extraction procedure takes around 0.2 milliseconds per packet, which is already impressive but not enough comparing to other popular extration engines availbale on the market, given the fact that pcapkit is a comprehensive packet processing module.

Additionally, pcapkit introduced alternative extractionengines to accelerate this procedure. By now pcapkit supports Scapy, DPKT, and PyShark.

Test Environment

Operating System	macOS Ventura 13.4.1
Chip	Apple M2 Pro
Memory	16 GB

Test Results

Engine	Performance (ms per packet)
dpkt	0.010390_056723
scapy	0.091690_233567
pcapkit	0.200390_390390
pyshark	24.682185_018351

Installation

Simply run the following to install the current version from PyPI:

pip install pypcapkit

Or install the latest version from the gi repository:

git clone https://github.com/JarryShaw/PyPCAPKit.git
cd pypcapkit
pip install -e .
# and to update at any time
git pull

And since pcapkit supports various extraction engines, and extensive plug-in functions, you may want to install the optional ones:

# for DPKT only
pip install pypcapkit[DPKT]
# for Scapy only
pip install pypcapkit[Scapy]
# for PyShark only
pip install pypcapkit[PyShark]
# and to install all the optional packages
pip install pypcapkit[all]
# or to do this explicitly
pip install pypcapkit dpkt scapy pyshark

For CLI usage, you will need to install the optional packages:

pip install pypcapkit[cli]
# or explicitly...
pip install pypcapkit emoji

Metadata

Release files for pypcapkit 1.3.5.post14

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for pypcapkit 1.3.5.post14
File	Size	Uploaded
pypcapkit-1.3.5.post14.tar.gz	669.1 kB	Apr 12, 2025	Details

Built distributions (wheels)

Table of built distributions (wheels) for pypcapkit 1.3.5.post14
File	Interpreter	ABI	Platform	Reset
pypcapkit-1.3.5.post14-pp310-none-any.whl 973.9 kB Apr 12, 2025	PyPy 3.10	none	any	Details
pypcapkit-1.3.5.post14-pp39-none-any.whl 973.9 kB Apr 12, 2025	PyPy 3.9	none	any	Details
pypcapkit-1.3.5.post14-pp38-none-any.whl 973.9 kB Apr 12, 2025	PyPy 3.8	none	any	Details
pypcapkit-1.3.5.post14-cp313-none-any.whl 973.9 kB Apr 12, 2025	CPython 3.13	none	any	Details
pypcapkit-1.3.5.post14-cp312-none-any.whl 973.9 kB Apr 12, 2025	CPython 3.12	none	any	Details
pypcapkit-1.3.5.post14-cp311-none-any.whl 973.9 kB Apr 12, 2025	CPython 3.11	none	any	Details
pypcapkit-1.3.5.post14-cp310-none-any.whl 973.9 kB Apr 12, 2025	CPython 3.10	none	any	Details
pypcapkit-1.3.5.post14-cp39-none-any.whl 973.9 kB Apr 12, 2025	CPython 3.9	none	any	Details

Total release size: 8.5 MB

Release files / pypcapkit-1.3.5.post14.tar.gz

Download URL	pypcapkit-1.3.5.post14.tar.gz
Size	669.1 kB
Tags	Source
SHA-256 checksum How to use checksums	`2a269eec19e44ddcbc6c2ff58997b288a7d7dc8e7f8bbb39fca2e929a862f004`
BLAKE2b-256 checksum How to use checksums	`c36fd6df8be0bd53ab6a327fcdbe8cff8b7e8438455b98c99a7db3fdb22bfbe4`
Upload date	Apr 12, 2025
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.12.9`

Release files / pypcapkit-1.3.5.post14-pp310-none-any.whl

Download URL	pypcapkit-1.3.5.post14-pp310-none-any.whl
Size	973.9 kB
Tags	PyPy 3.10
SHA-256 checksum How to use checksums	`2a5186919179dc93133429c6737a20665737ccf841789c0dbb2914d9a781f852`
BLAKE2b-256 checksum How to use checksums	`ee26dcdcd0a194eccf3a2837560d197fb4a33dc7c754b804880f4ed5d8ccb22d`
Upload date	Apr 12, 2025
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.12.9`

Release files / pypcapkit-1.3.5.post14-pp39-none-any.whl

Download URL	pypcapkit-1.3.5.post14-pp39-none-any.whl
Size	973.9 kB
Tags	PyPy 3.9
SHA-256 checksum How to use checksums	`ade308dc67f50edf8b12a37eb7712ed15e4e800cce7363ddc01ed507f3540e00`
BLAKE2b-256 checksum How to use checksums	`6f8286a30a62f395212742d1b23941592801e718391d1287894161e5e05e5d97`
Upload date	Apr 12, 2025
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.12.9`

Release files / pypcapkit-1.3.5.post14-pp38-none-any.whl

Download URL	pypcapkit-1.3.5.post14-pp38-none-any.whl
Size	973.9 kB
Tags	PyPy 3.8
SHA-256 checksum How to use checksums	`0bf0acc60e91373f4118429c3d8ee014ba836b6f416c28adf0ca70c0e83d8e0e`
BLAKE2b-256 checksum How to use checksums	`51ce95bc0661e8a2937a322816564a9d022fb82de5e0f34d5158941c96c6a59c`
Upload date	Apr 12, 2025
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.12.9`

Release files / pypcapkit-1.3.5.post14-cp313-none-any.whl

Download URL	pypcapkit-1.3.5.post14-cp313-none-any.whl
Size	973.9 kB
Tags	CPython 3.13
SHA-256 checksum How to use checksums	`5600a615dbf7155a1e983f416b6d5fbacd1ca6932e7b12159ea75b63a3dc42f8`
BLAKE2b-256 checksum How to use checksums	`fde7dcd34d8e7618f99e5488f9aa42a91c6213d91df1f2c59a4b3ccb698aa289`
Upload date	Apr 12, 2025
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.12.9`

Release files / pypcapkit-1.3.5.post14-cp312-none-any.whl

Download URL	pypcapkit-1.3.5.post14-cp312-none-any.whl
Size	973.9 kB
Tags	CPython 3.12
SHA-256 checksum How to use checksums	`805f7d4ea2a8b4599e47e92fcd68aec17c21ffd07021985610d155de64b8525a`
BLAKE2b-256 checksum How to use checksums	`3bd4d7a92cc8c778032f97e983883867e9b51a705c734da0b339b6db92ee8e02`
Upload date	Apr 12, 2025
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.12.9`

Release files / pypcapkit-1.3.5.post14-cp311-none-any.whl

Download URL	pypcapkit-1.3.5.post14-cp311-none-any.whl
Size	973.9 kB
Tags	CPython 3.11
SHA-256 checksum How to use checksums	`392a1af166df9a7e2fa1bc4ee2fbe6226706c23acc8d967f5028b4528fa24e74`
BLAKE2b-256 checksum How to use checksums	`289675fbd6f7cd251940dd536e6e870c4e34d61802c1e377ea8b7041aab1d8e4`
Upload date	Apr 12, 2025
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.12.9`

Release files / pypcapkit-1.3.5.post14-cp310-none-any.whl

Download URL	pypcapkit-1.3.5.post14-cp310-none-any.whl
Size	973.9 kB
Tags	CPython 3.10
SHA-256 checksum How to use checksums	`a38709dc6d44364c20c64c66c564d042f114288b9ca7c90c054f6d77d5b6beb4`
BLAKE2b-256 checksum How to use checksums	`7838629491a6a278f9b8d19779787499589764e939e27de05b792f95ad05a888`
Upload date	Apr 12, 2025
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.12.9`

Release files / pypcapkit-1.3.5.post14-cp39-none-any.whl

Download URL	pypcapkit-1.3.5.post14-cp39-none-any.whl
Size	973.9 kB
Tags	CPython 3.9
SHA-256 checksum How to use checksums	`3efdba766d5520c538d6a0545e25eeaa09e84c5b23ccefbca3fa93e81917b897`
BLAKE2b-256 checksum How to use checksums	`4bcc226ddf2e1ebfd98ebd28bd582cef8f120706d901c5ea05958aea8ac9ad02`
Upload date	Apr 12, 2025
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.12.9`