Python (windows)packet sniffer ARP

[Ralle]

Hello

I am wondering if it possible to create a packet sniffer in windows using python that only sniffs for ARP packets.

 

[Mark Betz]

Hello



I am wondering if it possible to create a packet sniffer in windows using python that only sniffs for ARP packets.

A couple of links to get you started:

http://www.winpcap.org/
http://code.google.com/p/winpcapy/

 

[ElChino]

A couple of links to get you started:

The OP could use Impacket's libpcap bindings. With one of the examples,
it's easy:
python examples/sniff.py ether proto 0x0806

The excellent Impacket/Pcapy is here:
http://oss.coresecurity.com/pcapy/ (but it seems down now).

--gv

 

[Asaf Las]

Hello

I am wondering if it possible to create a packet sniffer in windows using python that only sniffs for ARP packets.

In addition to Mark Betz suggestion - http://www.wireshark.org/ it works above winpcap and it is full functional protocol analyzer.
though for high loads it just hangs.

 

[Asaf Las]

There is also example on bottom of socket module for raw sockets you
can try it run (trigger arp packet by deleting one of dynamic entries in your
arp table by arp -d xxx.xxx.xxx.xxx)

http://docs.python.org/3.3/library/socket.html?highlight=socket#example