https://github.com/theflash2k/meth

Packet Sniffer with capabilities to sniff raw tcp, udp, http, icmp, ftp, ssh, sftp packets and filter them using berkley filters
https://github.com/theflash2k/meth

http-packet-sniffer icmp meth packet pcap sniff tcp udp wireshark

Last synced: 6 months ago
JSON representation

Packet Sniffer with capabilities to sniff raw tcp, udp, http, icmp, ftp, ssh, sftp packets and filter them using berkley filters

• Host: GitHub
• URL: https://github.com/theflash2k/meth
• Owner: TheFlash2k
• Created: 2020-12-24T22:58:17.000Z (almost 5 years ago)
• Default Branch: main
• Last Pushed: 2020-12-28T14:27:05.000Z (almost 5 years ago)
• Last Synced: 2025-03-29T10:32:18.387Z (6 months ago)
• Topics: http-packet-sniffer, icmp, meth, packet, pcap, sniff, tcp, udp, wireshark
• Language: Python
• Homepage:
• Size: 39.1 KB
• Stars: 11
• Watchers: 2
• Forks: 5
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
METH - A Python Based Packet Sniffer



  

  

  





  



A Python3 scapy based Packet Sniffer that has the capabilities of sniffing raw HTTP, TCP, UDP, ICMP, ARP packets and writing the output to .pcap for inspection within tools such as Wireshark.

## Features



  
Python 3 Support

  
Raw Packet Capturing

  
Pure Python

  
Cross-Platform

  
Supported Layers: HTTP, TCP, UDP, ICMP



## Installation:

Cloning:

```

$ git clone https://github.com/TheFlash2k/meth.git

$ cd meth/

$ pip3 install -r requirements.txt

```

First Run:

```

$ python3 meth.py

```

## Usage

```

usage: meth.py [-h] [-c COUNT] [-f FILTER [FILTER ...]] [-H] [-o OUTFILE] [-i INTERFACE]

METH - HTTP Packet Sniffer.

optional arguments:

  -h, --help            show this help message and exit

  -c COUNT, --count COUNT

                        Numbers of packets that you need to capture (0 = Infinity)

  -f FILTER [FILTER ...], --filter FILTER [FILTER ...]

                        The Berkeley Packet Filter (BPF) that you need to set. (Default is: 'port 80 and tcp') NOTE: You need to Specify them as a string

  -H, --http-only       Limit the results to display only http/https packets

  -o OUTFILE, --outfile OUTFILE

                        Store all the sniffed packet to a .pcap file (You don't need Specify the extension, just the file name.)

  -i INTERFACE, --interface INTERFACE

                        Specify an interface to sniff traffic on

```