If I filter my pcap file in wireshark for http, the number of shown packets are 1611. If I filter the same file by using scapy-http with
packets = rdpcap(path_pcap_file)http_packets = packets.filter(lambda pkt: pkt.haslayer('HTTP'))print(len(http_packets))
I get 15515 as the number of packets.
Why aren't the results equal? And what do I have to do to get the exact same packets as in wireshark filtering for http?
If I filter my pcap file in wireshark for http, the number of shown packets are 1611. If I filter the same file by using scapy-http with
packets = rdpcap(path_pcap_file)http_packets = packets.filter(lambda pkt: pkt.haslayer('HTTP'))print(len(http_packets))I get 15515 as the number of packets. Why aren't the results equal? And what do I have to do to get the exact same packets as in wireshark filtering for http?