Which statement describes the rdpcap function?

• A. It captures live traffic
• B. It reads packets from a pcap file
• C. It writes packets to a pcap file
• D. It filters by destination

Answer: (B)

rdpcap loads packets from an existing PCAP file into memory as Scapy Packet objects. It’s used for offline analysis, not live capture, so it reads from disk rather than sniffing the network. It doesn’t write to PCAP files—that’s what wrpcap does—and it doesn’t filter by destination, since filtering is handled during capture or by inspecting packets after loading. Example: packets = rdpcap('capture.pcap'); for p in packets: print(p.summary())