Convert cisco debug pppoe packets to pcap

ios_pppoe_debug_packets_to_pcap.py

#!/usr/bin/env python3

import sys
from scapy.all import *
import re


in_file = open(sys.argv[1], "rt")
out_file = open(sys.argv[2], "wb")
buffer = b""
packets = []

for l in in_file:
    if re.match("\t [0-9A-F ]+", l.rstrip()):
        b = bytes.fromhex(l.strip().replace(" ", "").replace("...",""))
        buffer += b
        continue
    if buffer:
        packets.append(buffer)
        buffer = b""

wrpcap(out_file, [Ether(p) for p in packets])

iosxr_pppoe_debug_packets_to_pcap.py

#!/usr/bin/env python3

import sys
from scapy.all import *
import re


in_file = open(sys.argv[1], "rt")
out_file = open(sys.argv[2], "wb")
packets = []

for l in in_file:
    r = re.search("(I|O) dst ([0-9a-f\.]{14}) src ([0-9a-f\.]{14}): len [0-9]+ 0x([0-9a-f]+)", l.strip())
    if not r:
        continue
    dstmac = bytes.fromhex(r.group(2).replace(".", ""))
    srcmac = bytes.fromhex(r.group(3).replace(".", ""))
    raw = bytes.fromhex(r.group(4))
    
    p = Ether(dst=dstmac, src=srcmac)/PPPoED(raw)
    packets.append(p)

wrpcap(out_file, [Ether(p) for p in packets])