Design and Architecture

import pcap,dpkt
import socket
import os
 
def capture():
    dev= pcap.lookupdev()
    for ts, pkt in pcap.pcap(name=dev, snaplen=65535, promisc=True, immediate=False):
        eth = dpkt.ethernet.Ethernet(pkt)
        if eth.type!=2048: #! if ipv6
            ip = eth.data
            typepack = eth.type
            try:
                dst_ip_6= socket.inet_ntop(socket.AF_INET6, ip.dst )  #! Dont judge my huge exception block, it will be fixed after testing
            except AttributeError:
                continue
        else:
            ip = eth.data
            tcp = ip.data
            typepack = eth.type
            try:
                src_ip = socket.inet_ntoa(ip.src)
                dst_ip = socket.inet_ntoa(ip.dst)
                if dst_ip == '192.168.1.2':
                    with open('//usr//home//mrfree//Desktop//Scripts//ipLog.txt','a') as log:
                        log.write('Session:%s:%s,%s\n'%(src_ip,tcp.dport,ts))
                        print('Session:%s:%s,%s\n'%(src_ip,tcp.dport,ts))
                        if tcp.dport < 1028:
                            log.write('Out of bounds connection attempt, Blocking %s \n'%(src_ip))
                            print('Out of bounds connection attempt, Blocking %s \n'%(src_ip))
                    with open('//usr//home//mrfree//Desktop//Scripts//filters.txt','r') as filters:
                        filters = filters.read()
                        if filters in tcp.data:
                                  log.write('Attempted Shell connection, Blocking %s \n'%(src_ip))
                                  subprocess.call('pfctl -k {0}'.format(src_ip))
                                  print('Attempted Shell connection, Blocking %s \n'%(src_ip))
                           
            except AttributeError,TypeError:
                continue
 
if __name__ == "__main__":
    capture()