写一个pcap包提取五元组的Python

代码如下：

import dpkt
import socket

def extract_five_tuple(pcap_file):
with open(pcap_file, 'rb') as f:
pcap = dpkt.pcap.Reader(f)
for ts, buf in pcap:
eth = dpkt.ethernet.Ethernet(buf)
if not isinstance(eth.data, dpkt.ip.IP):
continue
ip = eth.data
src_ip = socket.inet_ntoa(ip.src)
dst_ip = socket.inet_ntoa(ip.dst)
if not isinstance(ip.data, dpkt.tcp.TCP):
continue
tcp = ip.data
src_port = tcp.sport
dst_port = tcp.dport
print(f"src_ip: {src_ip}, dst_ip: {dst_ip}, src_port: {src_port}, dst_port: {dst_port}")

# example usage
extract_five_tuple('example.pcap')

这段代码可以从一个pcap文件中提取出五元组信息，包括源IP地址、目的IP地址、源端口号和目的端口号。