pyRT.apps.feeds.split_pcap Namespace Reference

Classes
class	Filter

Functions
def	DateTimeMs
	Return string-ified time as YYYY-MM-DD HH:MM:SS.mmm. More...
def	MapFile
	Open / Map in file. More...
def	ParseFilter
	Parse MPAC Filter / Output File. More...
def	TimeMs
	Return string-ified time as HH:MM:SS.mmm. More...

Variables
tuple	argc = len( sys.argv )
list	cmd = sys.argv[i]
	for-i More...
tuple	dflt = ParseFilter( mpac, ofile )
list	FDB = []
tuple	fh = pcap.FileHdr( map[:32] )
tuple	fltr = ParseFilter( kv[0], kv[1] )
list	fp = kv[0]
list	help
tuple	hSz = rh.Size()
string	ifile = './tshark.pcap'
tuple	iMB = sz/( 1024 * 1024 )
tuple	kv = val.split('@')
list	map = kv[1]
string	mpac = '224.0.246.232:19780'
	mSz = hSz+pSz
int	nPkt = 0
tuple	off = fh.Size()
	print( 's,s,s' % ( DateTimeMs( rh.UnixTime() ), ph.Src(), ph.Dst() ) ) More...
string	ofile = 'MEMOIR_Depth.pcap'
tuple	oMB = sz/( 1024 * 1024 )
tuple	ph = pcap.PktHdr( map[off:off+42] )
	pSz = rh._oLen
tuple	rh = pcap.RecHdr( map[off:off+20] )
	rOff = off
	Number of Packets Processed. More...
string	s = '%dMb mapped in; '
tuple	sz = len( map )
list	val = sys.argv[i+1]
tuple	zap = gzip.decompress( map )

Function Documentation

def pyRT.apps.feeds.split_pcap.DateTimeMs

(

tm = None

)

Return string-ified time as YYYY-MM-DD HH:MM:SS.mmm.

Parameters

tm	- Unix Time; None for now

Returns

string-ified time as YYYY-MM-DD HH:MM:SS.mmm

def pyRT.apps.feeds.split_pcap.MapFile

(

filename

)

Open / Map in file.

Parameters

filename

- File to mmap()

Returns

[ fp, map, fSz ] on success; None on error

def pyRT.apps.feeds.split_pcap.ParseFilter	(		mpac,
			ofile
	)

Parse MPAC Filter / Output File.

Parameters

mpac	- x.y.z.w:port
ofile	- Output filename

Returns

Filter on success; None on error

def pyRT.apps.feeds.split_pcap.TimeMs

(

tm = None

)

Return string-ified time as HH:MM:SS.mmm.

Parameters

tm	- Unix Time; None for now

Returns

string-ified time as HH:MM:SS.mmm

Variable Documentation

tuple pyRT.apps.feeds.split_pcap.argc = len( sys.argv )

list pyRT.apps.feeds.split_pcap.cmd = sys.argv[i]

for-i

tuple pyRT.apps.feeds.split_pcap.dflt = ParseFilter( mpac, ofile )

list pyRT.apps.feeds.split_pcap.FDB = []

tuple pyRT.apps.feeds.split_pcap.fh = pcap.FileHdr( map[:32] )

tuple pyRT.apps.feeds.split_pcap.fltr = ParseFilter( kv[0], kv[1] )

list pyRT.apps.feeds.split_pcap.fp = kv[0]

list pyRT.apps.feeds.split_pcap.help

Initial value:

= [ 'Usage : %s' % sys.argv[0],
               '   -f <pcap_filename>',
               '   -o <MPAC_addr@output_filename>',
               '',
               'Defaults:',
               '   -f : %s' % ifile,
               '   -o : %s@%s' % ( mpac, ofile ),
             ]

tuple pyRT.apps.feeds.split_pcap.hSz = rh.Size()

pyRT.apps.feeds.split_pcap.ifile = './tshark.pcap'

pyRT.apps.feeds.split_pcap.iMB = sz/( 1024 * 1024 )

tuple pyRT.apps.feeds.split_pcap.kv = val.split('@')

pyRT.apps.feeds.split_pcap.map = kv[1]

string pyRT.apps.feeds.split_pcap.mpac = '224.0.246.232:19780'

pyRT.apps.feeds.split_pcap.mSz = hSz+pSz

int pyRT.apps.feeds.split_pcap.nPkt = 0

pyRT.apps.feeds.split_pcap.off = fh.Size()

print( 's,s,s' % ( DateTimeMs( rh.UnixTime() ), ph.Src(), ph.Dst() ) )

On to the next one

string pyRT.apps.feeds.split_pcap.ofile = 'MEMOIR_Depth.pcap'

tuple pyRT.apps.feeds.split_pcap.oMB = sz/( 1024 * 1024 )

tuple pyRT.apps.feeds.split_pcap.ph = pcap.PktHdr( map[off:off+42] )

pyRT.apps.feeds.split_pcap.pSz = rh._oLen

tuple pyRT.apps.feeds.split_pcap.rh = pcap.RecHdr( map[off:off+20] )

pyRT.apps.feeds.split_pcap.rOff = off

Number of Packets Processed.

string pyRT.apps.feeds.split_pcap.s = '%dMb mapped in; '

tuple pyRT.apps.feeds.split_pcap.sz = len( map )

list pyRT.apps.feeds.split_pcap.val = sys.argv[i+1]

tuple pyRT.apps.feeds.split_pcap.zap = gzip.decompress( map )