Wireshark · Wireshark-dev: [Wireshark-dev] Pull PCAPNG Metadata with Python

[Jon Schipp <jonschipp@xxxxxxxxx>]

I'm looking for a way to print the application and version, OS, and interface in Python.

It looks like the Section Header Block and the Interface Description Block contain the data I need.

 

My problem is the blocks/fields are not at a fixed size because of the Options field in each block:

PCAPNG format, See section 3.1 and 3.2

 

Questions:

 

1.) Are there any Python libraries that print that information?

2.) If not, are there any ways through Python that information could be easily parsed obtained?

 

Thanks

Jon