kbandla / dpkt

fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
Other
1.1k stars 271 forks source link

Does not work with TLS record of ClientHello from Chrome 124 #665

Open perklet opened 7 months ago

perklet commented 7 months ago

Describe the bug It seems that dpkt can not parse pcap files captured for Chrome 124 with the X25519Kyber768 key encapsulation method.

It alwasy gives a NeedData error:

dpkt.dpkt.NeedData: TLSRecord data was too short.

To Reproduce

Expected behavior The pcap file should be parsed correctly.

Screenshots I have verified that the pcap file is valid and can be opened in Wireshark.

image

Details(please complete the following information):

Additional context N/A