python3-pyshark

Description

Pyshark is a Python module that provides programmatic access to packet data decoded by tshark, the command-line version of Wireshark. It exposes packets, protocol layers, and individual fields through a Python interface.

The module can read capture files such as PCAP and PCAP-NG, follow live traffic from a local interface, use ring-buffer capture mode, and read from remote capture sources served by rpcapd. Packet data is interpreted using the dissectors available in Wireshark, so protocol decoding is provided by tshark rather than reimplemented in Python.

Pyshark supports both packet summaries and detailed field-level access, along with display and BPF filtering, disabling selected protocol dissectors, and capture decryption for WEP, WPA-PWD, and WPA-PSK traffic.

It is suitable for inspecting existing capture files or analysing traffic observed on network interfaces, including Ethernet, IP, TCP, UDP, HTTP, DNS, and Wi-Fi traffic when those protocols are decoded by the installed Wireshark dissectors.

---

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V

---

Homepage

https://github.com/KimiNewt/pyshark

---

Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install python3-pyshark