Python 3 Scapy: A Fork of Scapy with Python 3 Compatibility

Scapy, a powerful packet-sniffing and manipulation tool, has been around for quite some time. However, with the advent of Python 3, it became necessary to fork the original Scapy project to ensure compatibility with the new language version. Enter Kamene, a Python 3-compatible version of Scapy that has been actively developed since its inception in 2015.

Key Features and Improvements

One of the most significant improvements in Kamene is its ability to read packets from Enhanced Packet Block (EPB) files as well as PCAP Next Generation (PCAPNG) files. This feature is particularly useful for reading and analyzing complex network traffic data. Additionally, Kamene includes a new command called tdecode, which allows users to call Tshark decoding on one packet and display the results. This is an invaluable tool for interactive work and debugging.

Kamene also offers several other features that make it more convenient and efficient for users. For instance, it provides an option to return NetworkX graphs instead of images, making it easier to visualize and analyze network data. Furthermore, Kamene replaces Pcircrypto with cryptography.io, which eliminates the need for libdnet on Windows.

Installation

Installing Kamene is relatively straightforward. Users can install it from source by running `python3 setup.py install` or use pip3 to install the latest published version: `pip3 install kamene`. On some OS configurations, installing libdnet may improve performance (for MacOS users, this can be done using Homebrew with the command `brew install libdnet`). Additionally, on all OS except Linux, libpcap should be installed for sending and receiving packets.

History and Development

Kamene was first developed as a fork of Scapy to implement Python 3 compatibility. It has undergone several naming transitions since its inception in 2015, with the most recent change being the renaming from 'scapy for python3' or 'scapcirc' to Kamene. The project is actively maintained and includes new features and improvements regularly.

In conclusion, Kamene is a powerful and versatile packet-sniffing and manipulation tool that offers several key advantages over the original Scapy. Its ability to read packets from EPB files and PCAPNG files makes it an invaluable tool for network analysis and debugging. Additionally, its options for returning NetworkX graphs instead of images and its use of cryptography.io make it a more convenient and efficient tool for users. With its active development and regular updates, Kamene is a great choice for anyone looking to work with Python 3 and Scapy.

Python3 scapy