corrected transport layer

probe-iterator.py

@@ -0,0 +1,65 @@
+from netaddr.core import NotRegisteredError
+from netaddr import *
+from scapy.all import *
+import logging
+import logging.handlers
+
+PROBE_REQUEST_TYPE=0
+PROBE_REQUEST_SUBTYPE=4
+
+WHITELIST =   ['18:dc:56:f0:40:40','34:a3:95:b1:2b:d9','48:13:7e:57:ae:b6','98:0c:a5:17:7d:2d'] 
+my_logger = logging.getLogger('agentlogger')
+handler = logging.handlers.RotatingFileHandler('tplink3022.log',    mode='a', maxBytes=1048576, backupCount=10, encoding=None, delay=0)
+my_logger.addHandler(handler)
+
+
+def PacketHandler(pkt):
+    if pkt.haslayer(Dot11):
+        if pkt.type==PROBE_REQUEST_TYPE and pkt.subtype == PROBE_REQUEST_SUBTYPE:
+            PrintPacket(pkt)
+
+
+def mac_info(mac):
+    global macf
+    maco = EUI(mac)
+    try:
+        macf = maco.oui.registration().org
+    except NotRegisteredError:
+        macf = "Not available"
+    return macf
+
+
+def PrintPacket(pkt):
+    print("Probe Request Captured:")
+    try:
+        extra = pkt.notdecoded
+    except:
+        extra = None
+    if extra!=None:
+        signal_strength = -(256-ord(extra[-4:-3]))
+    else:
+        signal_strength = -100
+        print("No signal strength found") 
+    mac_info(pkt.addr2)
+    print("Time: %s   Source: %s SSID: %s MANF: %s RSSi: %d"%(pkt.time,pkt.addr2,pkt.getlayer(Dot11ProbeReq).info,macf,signal_strength))
+
+    str = "%s,%s,%s,%s,%d\n"%(pkt.time,pkt.addr2,pkt.getlayer(Dot11ProbeReq).info,macf,signal_strength)
+    WriteToFile(str)
+
+
+def WriteToFile(str):
+    my_logger.warn(str)
+
+
+def main():
+    from datetime import datetime
+    print("[%s] Starting scan"%datetime.now())
+    print("Scanning :")
+    try:
+        sniff(iface=sys.argv[1],prn=PacketHandler,count=0,store=0)
+    except:
+        print('[!] Eroor : Failed to initialize sniffing')
+
+
+if __name__=="__main__":
+    main()