I am trying to extract a specific data from the pcap I want extract the packet byte of verify data in finished
I tried to do it with scapy
traffic = rdpcap("pcap/rene.pcap")
var = TLS(traffic[7].load)
hexdump(bytes(var))
and I got the byte of TCP layer
I tried to do that also with pyshark:
Client_Key_Exchange = []
cap = pyshark.FileCapture('pcap/rene.pcap')
for pkt in cap:
if "Client Key Exchange" in pkt.tls.handshake:
Client_Key_Exchange.append(pkt)
and somehow the line of verify data not apprear when I analanze the pcap. enter image description here
I need the packet byte of verify data for investigating
Can you please help me how can I do this?