yaro/wifi_test
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add display filter to pyshark FileCapture in analyze_pcap function

Browse source
This commit is contained in:
Yaro Kasear 2025-04-28 15:29:54 -05:00
parent 150f8fc448
commit 3675a5e97e
1 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
enrich.py
View file

@ -29,11 +29,16 @@ def parse_args():
return parser.parse_args() return parser.parse_args()
def analyze_pcap(pcapng_path, start_ts, end_ts, ap_bssid, ap_channel): def analyze_pcap(pcapng_path, start_ts, end_ts, ap_bssid, ap_channel):
display_filter = (
"(wlan.fx.type_subtype == 8 || wlan.fx.type_subtype == 5 || wlan.fc.type == 2) && "
"(wlan.bssid || wlan.sa || wlan.da)"
)
cap = pyshark.FileCapture( cap = pyshark.FileCapture(
pcapng_path, pcapng_path,
use_json=True, use_json=True,
include_raw=False, include_raw=False,
keep_packets=False keep_packets=False,
display_filter=display_filter
) )
ap_channel = int(ap_channel) ap_channel = int(ap_channel)