Python Forum
Counter of the duplicated packets from a pcap file
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Counter of the duplicated packets from a pcap file
#1
I want to count the duplicated packets from a pcap file. Duplicated packets are the packets whose the sequence number were already seen previously For that I extract firstly the list of the sequence number with this function:

  def seq_list(s):
    v = []
    a = [p['TCP'].seq if p.haslayer(TCP) else None
              for p in s]
    return a
Then I check if the current sequence number has already seen previously : (I'm not sure about this function)

   def is_dupl(s):
       v = seq_list(s)	
       a = []
       for p in s: 
          if p.haslayer(TCP):
              for i in range(0, len(v)):
                  a += v[0:i+1:1]
                  if p[TCP].seq in a:
                      return True 
          return False	
After that I made a function to get the list of the duplicated packet: (I'm not sure about this function)


    def find_dupl(s):
        tcpSeq = [p[TCP].seq if p.haslayer(TCP) and is_dupl(p) else None
                  for p in s]
        counter = Counter(tcpSeq)
        #del counter[None]
        print("---------------------length of counter dictionary : --", counter.items())
        return [[s[index] for index, seq in enumerate(tcpSeq)
            if seq == key]
            for (key, value) in counter.items()
            if value > 1]
And finally my counter:

    def duplication_pkt_count(s, s_ip, c_ip):
        sCount = 0
        cCount = 0
        duplication = find_dupl(s)

        for dup in duplication:
            for p in dup[1:]:
                if p.haslayer(IP):
                    if (p[IP].src == s_ip):
                        sCount += 1
                    if (p[IP].src == c_ip):
                        cCount += 1
        return (sCount, cCount)
And then I called the function duplication_pkt_count in my main.py code
The result is wrong. The number of the duplicated packets is wrong.

Please any help ?
Reply


Messages In This Thread
Counter of the duplicated packets from a pcap file - by salwa17 - Jun-26-2020, 07:47 PM

Possibly Related Threads…
Thread Author Replies Views Last Post
  Dealing with duplicated data in a CSV file bts001 10 11,720 Sep-06-2021, 12:11 AM
Last Post: SamHobbs
  how to count a retransmission packets from pcap file? salwa17 0 2,861 Jul-04-2020, 11:22 PM
Last Post: salwa17
  How to extract MSS (maximum size segment) from a pcap file ? salwa17 0 1,717 Jun-29-2020, 09:06 AM
Last Post: salwa17
  File Counter Help! jubin3 0 1,590 Jun-14-2020, 03:12 PM
Last Post: jubin3
  Splitting the audio file into smaller packets before transfer using UDP protocol in p MuhammadAli152 0 3,755 May-15-2020, 03:01 PM
Last Post: MuhammadAli152
  hex file to binary or pcap to binary baran01 1 5,735 Dec-11-2019, 10:19 PM
Last Post: Larz60+
  Reading PCAP FIles Variables 5 10,013 Apr-26-2019, 06:05 AM
Last Post: buran

Forum Jump:

User Panel Messages

Announcements
Announcement #1 8/1/2020
Announcement #2 8/2/2020
Announcement #3 8/6/2020