Skip to content

Access packet "Options"? #609

Open
Open
@tranzmatt

Description

@tranzmatt

Is there a way to access the options field in a pcapng packet? I'm trying to use pyshark to parse through pcapng files converted from Kismet, which inserts its GPS coordinates into the packet as per their documentation

If I open the pcapng file directly with a hex editor like bless, I can see the bytes I want

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|     Custom Option Code (2989) |         Option Length         |
+---------------------------------------------------------------+
|                Private Enterprise Number (55922)              |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| GPS Magic(0x47)| Version      |            Length             |
+---------------------------------------------------------------+

But I don't see any way to get to it via pyshark. Is there some mechanism I can't see or do I need to somehow customize/extend pyshark?

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions