See also pcapy/Impacket: http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=tool&name=Impacket http://corelabs.coresecurity.com/index.php?m

See also pcapy/Impacket: http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=tool&name=Impacket http://corelabs.coresecurity.com/index.php?module=Wiki&a... Scapy and Impacket are basically Python scriptable versions of tcpdump / wireshark. Very useful tools, particularly for measuring a server's behavior without having to modify it for logging, etc. I once used pcapy to log several years of an NTP pool server to make this graph: http://imgur.com/IvRdU http://imgur.com/IvRdU