{"categories":[{"label":"Networking","url":"https://skillfed.io/packages/category/system-networking"}],"enrichment":{"capability":"Pyshark wraps tshark (Wireshark's command-line tool) to parse network packets in Python using Wireshark's dissectors, supporting both file-based and live packet capture.","skillfed_tags":["network-analysis","packet-capture","wireshark-integration"],"use_cases":["Analyze saved network captures programmatically to extract protocol fields, build traffic reports, or detect anomalies.","Capture and inspect live traffic on a network interface in real time, filtering by protocol or BPF rules.","Decrypt encrypted traffic (WEP, WPA-PWD, WPA-PSK) and parse the decrypted packets using Wireshark dissectors.","Build network monitoring or security analysis tools that leverage Wireshark's protocol knowledge without reimplementing parsers.","Automate packet inspection workflows that would otherwise require manual Wireshark GUI interaction."],"what_it_does":"Pyshark is a Python wrapper around tshark that lets you parse network packets without reimplementing Wireshark's dissectors. Instead of parsing packets from scratch, it delegates to tshark's XML export and reads the structured output, giving you access to all protocol layers and fields that Wireshark understands. You can read from saved capture files (PCAP, PCAP-NG, etc.), live network interfaces, or remote hosts running rpcapd, and filter packets using BPF or Wireshark display filters.\n\nThe package is built on four runtime dependencies: lxml for XML parsing, termcolor for terminal output, packaging for version handling, and appdirs for cross-platform file paths. It supports Python 3.7 and later, and the repository is actively maintained with recent commits, though the maintainer has noted capacity constraints and welcomes contributors.","worth_installing":"Yes. Pyshark is a solid choice if you need to parse network packets in Python and want to reuse Wireshark's dissectors rather than writing your own. The install friction is low, the license is permissive, there are no known vulnerabilities, and the project is actively maintained. The main gotcha is the external tshark dependency\u2014you must have Wireshark installed separately. If you're comfortable with that requirement and need programmatic packet analysis, this is a practical tool."},"id":"pyshark","links":{"html":"https://skillfed.io/packages/pyshark","md":"https://skillfed.io/packages/pyshark.md","pypi":"https://pypi.org/project/pyshark/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2023-04-26","license_spdx":null,"license_treatment":"permissive","name":"pyshark","python_support":"unspecified","summary":"Python wrapper for tshark, allowing python packet parsing using wireshark dissectors"},"popularity":{"monthly_downloads":1046838,"position":4450,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"0.6"}