You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
I would like to get both detailed decoding info (including raw packet) and summary info (like one row in wireshark GUI), however from what I have tried in JSON / PDML / PSML mode tshark cannot provide both info. (If I'm not mistaken...
After trying EK mode with parameters -P -V -x, I surprisingly find that it provides what I want.
Describe the solution you'd like
When using EK mode, provide some interfaces/functions or a dict containing the other fields besides layers.
Describe alternatives you've considered
When parsing raw json_pkt, the code only pick layers for further parsing and the other fields are ignored.
Is your feature request related to a problem? Please describe.
I would like to get both detailed decoding info (including raw packet) and summary info (like one row in wireshark GUI), however from what I have tried in JSON / PDML / PSML mode tshark cannot provide both info. (If I'm not mistaken...
After trying EK mode with parameters
-P -V -x
, I surprisingly find that it provides what I want.Describe the solution you'd like
When using EK mode, provide some interfaces/functions or a dict containing the other fields besides
layers
.Describe alternatives you've considered
When parsing raw
json_pkt
, the code only picklayers
for further parsing and the other fields are ignored.pyshark/src/pyshark/tshark/output_parser/tshark_ek.py
Lines 37 to 58 in 803d76c
Maybe you can add a dict in
Packet
class and set its default value to None to include the other fields meanwhile keeping compatibility.BTW, you have to pay attention to pass
-P -V
parameters to tshark, just likeLiveRingCapture
in #573 .Thank you very much!
The text was updated successfully, but these errors were encountered: