rawdump

  _____                _____                        
 |  __ \              |  __ \                       
 | |__) |__ ___      _| |  | |_   _ _ __ ___  _ __  
 |  _  // _` \ \ /\ / / |  | | | | | '_ ` _ \| '_ \ 
 | | \ \ (_| |\ V  V /| |__| | |_| | | | | | | |_) |
 |_|  \_\__,_| \_/\_/ |_____/ \__,_|_| |_| |_| .__/ 
                                             | |    
                                             |_|

Unittest

已实现功能

支持Windows、Linux、Macos端抓包
支持根据网卡、协议、ip、端口、包体中的关键字等进行过滤（过滤以流为单位）
支持生成pcap文件

待实现功能

支持过滤包含RST包的流
支持字体染色

使用方法

$ pip install rawdump
$ rawdump -i lo -H ip -P port --keyword test -w 1.pcap

参数说明：

-i/--interface: 指定要抓包的网卡，Windows系统使用网卡序号，其它系统使用网卡名；不指定会抓所有网卡包
-p/--protocol: 要过滤的协议，如：tcp、udp、icmp，默认抓所有ip包
-H/--host: 要过滤的ip地址
-P/--port: 要过滤的端口（只支持TCP和UDP）
--keyword: 要过滤的关键字
-w/--file: 要保存的文件名，默认值为：rawdump.pcap

使用限制

Windows下需要Administrator权限，其它系统需要root权限。

Metadata

Release files for rawdump 0.2.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for rawdump 0.2.0
File	Size	Uploaded
rawdump-0.2.0.tar.gz	10.9 kB	Jun 13, 2020	Details

Built distribution (wheel)

Table of built distributions (wheels) for rawdump 0.2.0
File	Interpreter	ABI	Platform	Reset
rawdump-0.2.0-py3-none-any.whl 12.0 kB Jun 13, 2020	Python 3	none	any	Details

Total release size: 22.9 kB

Release files / rawdump-0.2.0.tar.gz

Download URL	rawdump-0.2.0.tar.gz
Size	10.9 kB
Tags	Source
SHA-256 checksum How to use checksums	`263e7afd45cf14ff982f7eea4a8ac9fdf8d9f1270931be924d2c9b7fac001948`
BLAKE2b-256 checksum How to use checksums	`fb4adb7d2db51c98ebced7d2985d10910bef75524b1b37b63e760f5c5602ecc8`
Upload date	Jun 13, 2020
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/3.1.1 pkginfo/1.5.0.1 requests/2.23.0 setuptools/47.1.1 requests-toolbelt/0.9.1 tqdm/4.46.1 CPython/3.7.7`

Release files / rawdump-0.2.0-py3-none-any.whl

Download URL	rawdump-0.2.0-py3-none-any.whl
Size	12.0 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`80365240d2e3b54e6cc2453127ad83b441e2e012d7c79f54c9f861f39d0b9513`
BLAKE2b-256 checksum How to use checksums	`bf8a83e29b2d29c690150a70e30e29a6040e14496f8a132374771bbd7078fd2a`
Upload date	Jun 13, 2020
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/3.1.1 pkginfo/1.5.0.1 requests/2.23.0 setuptools/47.1.1 requests-toolbelt/0.9.1 tqdm/4.46.1 CPython/3.7.7`