processarp.py

#!/usr/bin/python

#Author: Suraj Patil
#Version: 2.0
#Date: 27th March 2014

#Reads a pcap file into python using scapy and produces a csv file as output in the following format: Timestamp, source MAC address, source IP address, Destination MAC address, Destination IP address
#modular design, which makes it easy to include this source into another program, or to extend this one

from scapy.all import *

def main():
   pcap_path = raw_input('Path of pcap file: ') # enter the path where you stored the pcap file
   file_path = raw_input('Enter target file name')  #enter the path where you want to create a csv file
   process(pcap_path, file_path)

def process(pcap_path, file_path):
   try:
     file = open(file_path+'.csv','w')  #tries to opens the file in read mode
     pkts = rdpcap(pcap_path)  #inbuilt function of scapy to read pcap files
     for i in range(len(pkts)):
       if ARP in pkts[i]:  #checks if the packet is an ARP packet or not
        file.write('%d,%s,%s,%s,%s,%d,%s\n'%( pkts[i].time, pkts[i].hwsrc, pkts[i].psrc, pkts[i].hwdst, pkts[i].pdst, pkts[i].op))
        print 'file write complete'
        #Timestamp, source MAC address, source IP address, Destination MAC address, Destination IP address
     file.close()
   except:
     print 'some error occured'


main()