Which Scapy function writes packets to a pcap file?

• A. wrppcap() writes packets to a pcap file.
• B. sniff() captures live traffic.
• C. rdpcap() reads packets from a pcap file.
• D. writepcap() is not a Scapy function.

Answer: (A)

Exporting a collection of packets to a pcap file is done with the Scapy writer function. You pass a filename and the sequence of packets, and it writes them in the standard pcap format for later analysis. This is the direct way to save captured or crafted packets to disk. While sniff() is used for capturing live traffic, and rdpcap() reads packets from a pcap file, neither of those writes. The term writepcap() isn’t a Scapy function, so the actual writing operation relies on the writer function, commonly used as wrpcap(filename, packets).