Extracting packet header using Python

Question

I am new to Python and stackoverflow, very new.

I want to extract the destination port:

2629  >  0 [SYN] Seq=0 Win=512 Len=100
0  >  2629 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
0  >  2633 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0

I want to retrieve destination ports for every line: '0' , '2629', '2633' using python regex and ignore the rest (the number that appears after '>' and before '['.

re.findall("\d\d\d\d\d|\d\d\d\d|\d\d\d|\d\d|\d", str)

but this is very generic one. What is the best regex for such scenario?

You're trying to parse the output of some program. Why not do the packet capture in Python directly? E.g. stackoverflow.com/questions/4948043/… — Jonathon Reinhart
– Jonathon Reinhart, Commented Nov 23, 2019 at 1:26
if you have string then split it using space and get third element line.split(' ')[2] — furas
– furas, Commented Nov 23, 2019 at 1:33

Julien Roullé · Accepted Answer · 2019-11-23 01:37:48Z

1

You could use the split function on string for this specific case. A quick implementation would be:

dest_ports = []
lines = [
    "2629  >  0 [SYN] Seq=0 Win=512 Len=100", 
    "0  >  2629 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0", 
    "0  >  2633 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0"
]

for line in lines:
  dest_ports.append(line.split('>  ')[1].split(' [')[0])

Which would yield the answer:

dest_ports = ['0', '2629', 2633']

answered Nov 23, 2019 at 1:37

Julien Roullé

6724 silver badges15 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

oppressionslayer · Accepted Answer · 2019-11-23 01:56:11Z

0

you could use a regex like this:

dff=io.StringIO("""2629  >  0 [SYN] Seq=0 Win=512 Len=100  
0  >  2629 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0  
0  >  2622  [RST, ACK] Seq=1 Ack=1 Win=0 Len=0  
0  >  2633 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0""") 

dff.seek(0) 
for line in dff: 
     print(re.search('(^\d+\s+\>\s+)(\d+)', line).groups()[1])

answered Nov 23, 2019 at 1:56

oppressionslayer

7,2242 gold badges11 silver badges26 bronze badges

Collectives™ on Stack Overflow

Extracting packet header using Python

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related