Description
Is your feature request related to a problem? Please describe.
I would like to get both detailed decoding info (including raw packet) and summary info (like one row in wireshark GUI), however from what I have tried in JSON / PDML / PSML mode tshark cannot provide both info. (If I'm not mistaken...
After trying EK mode with parameters -P -V -x
, I surprisingly find that it provides what I want.
Describe the solution you'd like
When using EK mode, provide some interfaces/functions or a dict containing the other fields besides layers
.
Describe alternatives you've considered
When parsing raw json_pkt
, the code only pick layers
for further parsing and the other fields are ignored.
pyshark/src/pyshark/tshark/output_parser/tshark_ek.py
Lines 37 to 58 in 803d76c
Maybe you can add a dict in Packet
class and set its default value to None to include the other fields meanwhile keeping compatibility.
BTW, you have to pay attention to pass -P -V
parameters to tshark, just like LiveRingCapture
in #573 .
Thank you very much!