The Python Oracle

Get full hexdump of parsed packet in Pyshark

Become part of the top 3% of the developers by applying to Toptal https://topt.al/25cXVn

--

Music by Eric Matyas
https://www.soundimage.org
Track title: Lost Meadow

--

Chapters
00:00 Question
00:37 Accepted answer (Score 1)
01:13 Answer 2 (Score 0)
01:29 Thank you

--

Full question
https://stackoverflow.com/questions/2742...

Question links:
[Pyshark]: https://github.com/KimiNewt/pyshark

Accepted answer links:
[construct]: https://pypi.python.org/pypi/construct

Answer 2 links:
[pyshark_parser]: https://github.com/jlents/pyshark_parser

--

Content licensed under CC BY-SA
https://meta.stackexchange.com/help/lice...

--

Tags
#python #pyshark

#avk47



ACCEPTED ANSWER

Score 0


Unfortunately, you cannot at the moment. Pyshark parses the output of tshark which does not contain the original packet bytes. You can try "reassembling" the packet yourself but I wouldn't recommend it.

As it stands, this feature can be added but is not possible at the moment, if you want that specifically I suggest you use a different package or parse only the packets (without any protocols) yourself or using construct (or other similar packages).