Creating MD5 Checksum using some fields

KimiNewt / pyshark

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors

MIT License

2.22k stars 422 forks source link

Creating MD5 Checksum using some fields #498

Open danielRV7 opened 3 years ago

danielRV7 commented 3 years ago

Hey!

I want to create a MD5 checksum in my Python code using some parts of a packet, those parts are:

IP addr + IP destination
Raw TCP layer data (inside of the IP layer), all the layer.

I know how to create the MD5 but I can't access the values I am looking for.

Is it possible to do it? I used some "packet.data.data" and is not working. I am starting to think that Pyshark is not capable of doing it as it is too simple tool. Can you help me please?

danielRV7 commented 3 years ago

I also used a code similar to this:

Captura de pantalla 2021-09-16 a las 17 12 27

But I don't know why there are so many fields. I am not sure if generating an MD5 from these fields is correct, because in some cases I need to match 2 md5 hashes and it looks like they will never match.