scapy.config¶
Implementation of the configuration object.
-
class
scapy.config.
CacheInstance
(name='noname', timeout=None)[source]¶ Bases:
Dict
[str
,Any
],object
-
name
¶
-
timeout
¶
-
-
class
scapy.config.
Conf
[source]¶ Bases:
scapy.config.ConfClass
This object contains the configuration of Scapy.
-
ASN1_default_codec
= None¶ Codec used by default for ASN1 objects
-
AS_resolver
= None¶ choose the AS resolver class to use
-
BTsocket
= None¶
-
L2listen
= None¶
-
L2socket
= None¶
-
L3socket
= None¶
-
L3socket6
= None¶
-
USBsocket
= None¶
-
auto_crop_tables
= True¶
-
auto_fragment
= True¶
-
bufsize
= 65536¶
-
cache_pcapiflist
= {}¶ holds the cache of interfaces loaded from Libpcap
-
checkIPID
= False¶ if 0, doesn’t check that IPID matches between IP sent and ICMP IP citation received if 1, checks that they either are equal or byte swapped equals (bug in some IP stacks) if 2, strictly checks that they are equals
-
checkIPaddr
= True¶
-
checkIPinIP
= True¶ if True, checks that IP-in-IP layers match. If False, do not check IP layers that encapsulates another IP layer
-
checkIPsrc
= True¶ if 1, checks IP src in IP and ICMP IP citation match (bug in some NAT stacks)
-
check_TCPerror_seqack
= False¶ if 1, also check that TCP seq and ack match the ones in ICMP citation
-
color_theme
¶
-
commands
= bind_layers : Bind 2 layers on some specific fields' values. bridge_and_sniff : Forward traffic between interfaces if1 and if2, sniff and return chexdump : Build a per byte hexadecimal representation corrupt_bits : corrupt_bytes : explore : Function used to discover the Scapy layers and protocols. fletcher16_checkbytes: Calculates the Fletcher-16 checkbytes returned as 2 byte binary-string. fletcher16_checksum : Calculates Fletcher-16 checksum of the given buffer. fuzz : hexdiff : hexdump : Build a tcpdump like hexadecimal view hexedit : Run hexedit on a list of packets, then return the edited packets. hexstr : Build a fancy tcpdump like hex from bytes. import_hexcap : Imports a tcpdump like hexadecimal view linehexdump : Build an equivalent view of hexdump() on a single line ls : List available layers, or infos on a given layer class or name. rdpcap : Read a pcap or pcapng file and return a packet list restart : Restarts scapy rfc : send : sendp : sendpfast : Send packets at layer 2 using tcpreplay for performance sniff : split_layers : Split 2 layers previously bound. sr : sr1 : sr1flood : Flood and receive packets at layer 3 and return only the first answer srflood : Flood and receive packets at layer 3 srloop : srp : srp1 : srp1flood : Flood and receive packets at layer 2 and return only the first answer srpflood : Flood and receive packets at layer 2 srploop : tcpdump : Run tcpdump or tshark on a list of packets. tdecode : tshark : Sniff packets and print them calling pkt.summary(). wireshark : wrpcap : Write a list of packets to a pcap file¶
-
contribs
= {}¶ a dict which can be used by contrib layers to store local configuration
-
crypto_valid
= False¶
-
crypto_valid_advanced
= False¶
-
debug_dissector
= False¶ raise exception when a packet dissector raises an exception
-
debug_match
= False¶ when 1, store received packet that are not matched into debug.recv
-
debug_tls
= False¶ When 1, print some TLS session secrets when they are computed.
-
default_l2
= None¶
-
dot15d4_protocol
= None¶
-
emph
= <Emphasize []>¶
-
except_filter
= ''¶ BPF filter for packets to ignore
-
extensions_paths
= '.'¶ path or list of paths where extensions are to be looked for
-
fancy_prompt
= True¶
-
filter
= ''¶ bpf filter added to every sniffing socket to exclude traffic from analysis
-
geoip_city
= None¶
-
histfile
= '/home/docs/.scapy_history'¶ history file
-
iface
¶ selects the default output interface for srp() and sendp().
-
ifaces
= None¶ holds the Scapy interface list and manager
-
interactive
= False¶
-
interactive_shell
= ''¶ Auto
- Type
can be “ipython”, “python” or “auto”. Default
-
ipv6_enabled
= True¶
-
l2types
¶
-
l3types
¶
-
layers
= Packet : <member 'name' of 'Packet' objects> NoPayload : <member 'name' of 'Packet' objects> Raw : <member 'name' of 'Packet' objects> Padding : <member 'name' of 'Packet' objects> ASN1_Packet : <member 'name' of 'Packet' objects>¶
-
load_layers
= ['bluetooth', 'bluetooth4LE', 'dhcp', 'dhcp6', 'dns', 'dot11', 'dot15d4', 'eap', 'gprs', 'hsrp', 'inet', 'inet6', 'ipsec', 'ir', 'isakmp', 'l2', 'l2tp', 'llmnr', 'lltd', 'mgcp', 'mobileip', 'netbios', 'netflow', 'ntp', 'ppi', 'ppp', 'pptp', 'radius', 'rip', 'rtp', 'sctp', 'sixlowpan', 'skinny', 'smb', 'smb2', 'snmp', 'tftp', 'vrrp', 'vxlan', 'x509', 'zigbee', 'tuntap']¶
-
logLevel
¶
-
loopback_name
= 'lo'¶
-
manufdb
= None¶
-
mib
= None¶ holds MIB direct access dictionary
-
min_pkt_size
= 60¶
-
neighbor
= None¶
-
netcache
¶
-
noenum
= <Resolve []>¶ holds list of enum fields for which conversion to string should NOT be done
-
padding
= 1¶ includes padding in disassembled packets
-
padding_layer
= None¶
-
prog
= display = 'display' dot = 'dot' hexedit = 'hexer' ifconfig = 'ifconfig' pdfreader = 'xdg-open' psreader = 'xdg-open' svgreader = 'xdg-open' tcpdump = 'tcpdump' tcpreplay = 'tcpreplay' tshark = 'tshark' universal_open = 'xdg-open' wireshark = 'wireshark'¶
-
promisc
= True¶ default mode for listening socket (to get answers if you spoof on a lan)
-
prompt
¶
-
raise_no_dst_mac
= False¶ When True, raise exception if no dst MAC found otherwise broadcast. Default is False.
-
raw_layer
= None¶
-
raw_summary
= False¶
-
recv_poll_rate
= 0.05¶ how often to check for new packets. Defaults to 0.05s.
-
resolve
= <Resolve []>¶ holds list of fields for which resolution should be done
-
route
= None¶ holds the Scapy IPv4 routing table and provides methods to manipulate it
-
route6
= None¶ holds the Scapy IPv6 routing table and provides methods to manipulate it
-
session
= ''¶ filename where the session will be saved
-
sniff_promisc
= 1¶ default mode for sniff()
-
stats_classic_protocols
= []¶
-
stats_dot11_protocols
= []¶
-
stealth
= 'not implemented'¶ if 1, prevents any unwanted packet to go out (ARP, DNS, …)
-
temp_files
= []¶
-
teredoPrefix
= ''¶
-
teredoServerPort
= None¶
-
use_bpf
¶
-
use_npcap
= False¶
-
use_pcap
¶ use libpcap integration or not. Changing this value will update the conf.L[2/3] sockets
-
use_pypy
¶ read only attribute to show if PyPy is in use
-
verb
= 2¶ level of verbosity, from 0 (almost mute) to 3 (verbose)
-
version
¶
-
warning_threshold
= 5¶ how much time between warnings from the same place
-
wepkey
= ''¶
-
-
class
scapy.config.
Emphasize
[source]¶ Bases:
scapy.config.ConfigFieldList
-
class
scapy.config.
LayersList
[source]¶ Bases:
List
[Type
[scapy.packet.Packet
]]
-
class
scapy.config.
ProgPath
[source]¶ Bases:
scapy.config.ConfClass
-
display
= 'display'¶
-
dot
= 'dot'¶
-
hexedit
= 'hexer'¶
-
ifconfig
= 'ifconfig'¶
-
pdfreader
= 'xdg-open'¶
-
psreader
= 'xdg-open'¶
-
svgreader
= 'xdg-open'¶
-
tcpdump
= 'tcpdump'¶
-
tcpreplay
= 'tcpreplay'¶
-
tshark
= 'tshark'¶
-
universal_open
= 'xdg-open'¶
-
wireshark
= 'wireshark'¶
-
-
class
scapy.config.
Resolve
[source]¶ Bases:
scapy.config.ConfigFieldList
-
scapy.config.
crypto_validator
(func)[source]¶ This a decorator to be used for any method relying on the cryptography library. # noqa: E501 Its behaviour depends on the ‘crypto_valid’ attribute of the global ‘conf’.
-
scapy.config.
isCryptographyAdvanced
()[source]¶ Check if the cryptography module is present, and if it supports X25519, ChaCha20Poly1305 and such.
Notes: - cryptography >= 2.0 is required - OpenSSL >= 1.1.0 is required