KimiNewt / pyshark

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors
MIT License
2.23k stars 422 forks source link

Unable to retrieve duplicate layers #700

Open sampatti37 opened 2 months ago

sampatti37 commented 2 months ago

I have a capture that I decrypted using an SSLKEYLOGFILE. Some of the packets contain two layers of DATA, yet I am only able to access the first DATA layer instance. The majority of my decrypted data is in the second instance but I have no way to access that unless I do so through wireshark.

johnbumgarner commented 2 months ago

Can you please provide the code that you are using to extract packet information?