Skip to content

Latest commit

 

History

History
29 lines (23 loc) · 1022 Bytes

README.md

File metadata and controls

29 lines (23 loc) · 1022 Bytes

MIT Licence Generic badge Generic badge

SLLv2-to-eth

Convert pcap from SLL2 (Linux cooked capture v2) to Ethernet

Prerequisite

To run the code provided, you need to install Python and the Scapy library (https://scapy.net)

  1. Install Python
sudo apt update
sudo apt install python3 python3-pip
  1. Install Scapy
sudo pip3 install scapy

Run

python3 sllv2-to-eth.py input.pcap output.pcap --src-mac aa:bb:cc:dd:ee:11 --dst-mac ff:ee:dd:cc:bb:22

NOTE: if you don't specify --src-mac and --dst-mac the default values are aa:bb:cc:dd:ee:ff and ff:ee:dd:cc:bb:aa

Disclaimer

This script intends to cover the problem of importing pcap with DLT_LINUX_SLL2 as Data Link layer, which is not recognized for some application