python 抓包(转)

import pcap, dpkt, struct
import binascii

def main():
    a = pcap.pcap()
    a.setfilter('udp portrange 4000-4050')

    try:
        for i,pdata in a:
            p=dpkt.ethernet.Ethernet(pdata)
            src='%d.%d.%d.%d' % tuple(map(ord,list(p.data.src)))
            dst='%d.%d.%d.%d' % tuple(map(ord,list(p.data.dst)))
            sport = p.data.data.sport
            dport = p.data.data.dport
            qq = int( binascii.hexlify(p.data.data.data[7:11]) , 16 )
            print 'QQ: %d, From: %s:%d , To: %s:%d' % (qq,src,sport,dst,dport)

    except Exception,e:

        print '%s' % e

    n = raw_input()


if __name__ == '__main__':
    main()