This is great. Could you let me know how you are doing it, as I am not able to dissect it yet, I tried this program but its not working.

------------------------------------------------------------------------------

from scapy.all import *

def ExtractFIX(pcap): """A generator that iterates over the packets in a scapy pcap iterable and extracts the FIX messages. In the case where there are multiple FIX messages in one packet, yield each FIX message individually.""" for packet in pcap: if packet.haslayer('Raw'): # Only consider TCP packets which contain raw data. load = packet.getlayer('Raw').load

        # Ignore raw data that doesn't contain FIX.
        if not 'FIX' in load:
            continue
    # Replace \x01 with '|'.
    load = re.sub(r'\x01', '|', load)

    # Split out each individual FIX message in the packet by putting a 
    # ';' between them and then using split(';').
    for subMessage in re.sub(r'\|8=FIX', '|;8=FIX', load).split(';'):
        # Yield each sub message. More often than not, there will only be one.
        assert subMessage[-1:] == '|'
        yield subMessage
else:
    continue</code></pre><p>pcap = rdpcap('dump.pcap') for fixMessage in ExtractFIX(pcap): print fixMessage<br />

---------------------------------------------------------------------------------------
And giving this error
pcap = rdpcap('dump.pcap') NameError: name 'rdpcap' is not defined process finished with exit code 1