{
  "added_at": "2026-10-17",
  "additional_evidence_urls": [
    "https://github.com/secdev/scapy/blob/e2e35c07bce2f40e7513e1b29a6d300d5329dbc3/pyproject.toml",
    "https://github.com/secdev/scapy/blob/e2e35c07bce2f40e7513e1b29a6d300d5329dbc3/LICENSE",
    "https://github.com/secdev/scapy/blob/e2e35c07bce2f40e7513e1b29a6d300d5329dbc3/doc/scapy/installation.rst",
    "https://github.com/secdev/scapy/blob/e2e35c07bce2f40e7513e1b29a6d300d5329dbc3/doc/scapy/build_dissect.rst",
    "https://scapy.readthedocs.io/en/stable/introduction.html",
    "https://github.com/secdev/scapy/releases/tag/v2.8.0",
    "https://pypi.org/project/scapy/2.8.0/"
  ],
  "category": "protocol-analysis",
  "description_en": "Script packet dissection, construction, request/reply matching and capture-file analysis in Python. Custom packet fields and layer bindings let analysts encode understood wire formats and investigate protocol behavior.",
  "description_zh": "使用 Python 编写报文解析、构造、请求／响应匹配及捕获文件分析流程；自定义报文字段与层绑定可将已理解的线格式编码为可操作模型，辅助研究协议行为。",
  "entry_url": "https://awesomerea.org/resources/scapy/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/scapy/",
  "evidence_url": "https://github.com/secdev/scapy/blob/e2e35c07bce2f40e7513e1b29a6d300d5329dbc3/README.md",
  "group": "tools",
  "id": "scapy",
  "json_url": "https://awesomerea.org/resources/scapy/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/scapy/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/scapy/index.md",
  "name": "Scapy",
  "name_zh": "Scapy 报文分析与构造工具",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Reviewed stable release: 2.8.0, published 2026-10-02. Its package metadata requires Python >=3.7,<4; upstream says the 2.8 major version is the last to support Python 3.7 and 3.8. Use release-matched documentation rather than older cached version pages.",
    "Linux, macOS and BSD have documented platform support; Windows requires Npcap. Live capture or packet transmission needs suitable interfaces and privileges. Offline capture analysis is a separate workflow, and libpcap requirements vary by platform and feature.",
    "Optional features have additional dependencies, such as cryptography for cryptographic functionality and plotting tools for visual reports. Unknown formats require suitable custom Packet/Field definitions and bindings; dissection does not automatically infer complete protocol semantics or peer implementations.",
    "GPL-2.0-only in the reviewed package metadata, with dependency and capture-driver licenses separate. The 2.8.0 release notes describe security fixes."
  ],
  "requirements_zh": [
    "核查稳定版本为 2.8.0，发布于 2026-10-02。包元数据要求 Python >=3.7,<4；上游说明 2.8 大版本是最后支持 Python 3.7 和 3.8 的版本系列。应使用匹配该版本的文档，而非较旧的缓存页面。",
    "文档提供 Linux、macOS 和 BSD 的平台支持说明；Windows 需要 Npcap。实时抓包或发送报文需要适合的接口与权限。离线捕获文件分析属于不同工作流，libpcap 的要求随平台及功能而异。",
    "可选功能具有额外依赖，例如密码学功能所需的 cryptography，以及可视化报告所需的绘图工具。未知格式需要适用的自定义 Packet／Field 定义及绑定；解析不会自动推断完整协议语义或通信对端实现。",
    "核查的包元数据声明 GPL-2.0-only，依赖项与抓包驱动的许可单独适用。2.8.0 发布说明列出了安全修复。"
  ],
  "targets": [
    "protocol"
  ],
  "url": "https://github.com/secdev/scapy",
  "verification": "source-reviewed",
  "verified_at": "2026-10-17T02:53:06.350416Z"
}