0

I am trying to extract a specific data from the pcap I want extract the packet byte of verify data in finished

enter image description here

I tried to do it with scapy

traffic = rdpcap("pcap/rene.pcap")
var = TLS(traffic[7].load)
hexdump(bytes(var))
and I got the byte of TCP layer 

I tried to do that also with pyshark:

Client_Key_Exchange = []
cap = pyshark.FileCapture('pcap/rene.pcap')
for pkt in cap:
  if "Client Key Exchange" in pkt.tls.handshake:
     Client_Key_Exchange.append(pkt)

and somehow the line of verify data not apprear when I analanze the pcap. enter image description here



I need the packet byte of verify data for investigating

Can you please help me how can I do this? 
Hodaya
  • 1
  • 1

0 Answers0