Packet with multiple TPKTs - only first subpacket available

KimiNewt / pyshark

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors

MIT License

2.2k stars 421 forks source link

Open plipK opened 2 years ago

plipK commented 2 years ago

Hi,

As you can see in the following screenshot I have a capture containing a packet with two MMS subpackets:

When I load and print the packet with the following instructions:

import pyshark
cap = pyshark.FileCapture(capFile)
pack = cap[0]
print(pack)

I see both MMS packets in the print output.

But when I watch the pack object with the debugger there is only on MMS packet:

How can I access the second MMS packet?

KimiNewt commented 2 years ago

Good question! Could you send a packet or the PDML of it? I'm unfamiliar with the protocol so it might require a bit of different handling.