Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Filtering for http with scapy-http differs from filtering for http in wireshark #31

Open
brumhardS opened this issue Jan 18, 2018 · 0 comments

Comments

@brumhardS
Copy link

brumhardS commented Jan 18, 2018

If I filter my pcap file in wireshark for http, the number of shown packets are 1611. If I filter the same file by using scapy-http with
packets = rdpcap(path_pcap_file)
http_packets = packets.filter(lambda pkt: pkt.haslayer('HTTP'))
print(len(http_packets))
I get 15515 as the number of packets.
Why aren't the results equal? And what do I have to do to get the exact same packets as in wireshark filtering for http?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant