Writing Packets to Trace File with Scapy

May - 2015 (~1 minutes read time)

This is a follow-up post to accompany the previous Importing packets from trace files with scapy post. So you've sniffed or generated some packets with scapy and it's time to write them to file to analyze and double-check your work. Here's a simple example of how to save those packets.

localhost:~ packetgeek$ scapy
>>> packets = sniff(count=10)
>>> packets
<Sniffed: TCP:0 UDP:3 ICMP:0 Other:7>
>>> wrpcap('sniffed.pcap', packets)

Tada!  That's it. There's no options or special functions, you probably should do your packet processing before you write the packets to file.