Hello everyone, and welcome to Network Activity and Packet Analysis with Python.
My name is Sean Wilkins,
and this is the Performing Packet Sniffing Actions with Scapy module.
I'd like to welcome you to our course and module as we are going
to start from where we dropped off in the Network Basics with
Python course and move our coverage from the Python socket
module to the Scapy module.
As you will find over this course, while the socket module is very powerful,
it is also very low level.
Sometimes this is a good thing as you may want that granular
control over your networking connection and behavior.
But often as a network engineer or a network security engineer,
you are looking for something that both offers flexibility
and offers it in a quick‑to‑develop way.
This is where Scapy shines.
In this module,
we are going to focus on covering how Scapy can be used to
capture traffic and filter it to turn it into a dataset that
will be the most useful for your analysis.
Often, it can be challenging, especially at the CLI,
to have an easy‑to‑use tool that can capture traffic in a way
that gives you a focus list of packets that can then further be
filtered to adjust to your needs.
So with that in mind, let's get into the specifics of this module.
This module is split into five different sections.
First, we will set the stage for this course and introduce you,
the learner, as a new networking security engineer for Globomantics and how,
in this position,
you can utilize the different concepts covered throughout
this course to both increase your knowledge and help
Globomantics meet their goals.
Next,
we will go through a quick review of the learning
environment we are going to be utilizing in our
demonstration environment and how it can be set up.
We then start up our conversation about Scapy and note some of its capabilities.
We will then move into the specifics of this module where we will talk about
how Scapy handles packet capture and include a review of the Scapy sniff
command and it's commonly utilized parameters.
And finally,
we will move into our demonstration environment where we will show you
firsthand how to utilize the sniff command to capture traffic from a
live network and from previously captured files and how to control the
packets that are gathered.
And so now with all this out of the way, let's get started.