pyshark_packet_analysis icon indicating copy to clipboard operation
pyshark_packet_analysis copied to clipboard

pyshark.liveCapture drop packets?

Open Lzhou2020 opened this issue 2 years ago • 5 comments

When comparing the packets captured in "live_cap.pcap" by the function: cap = pyshark.LiveCapture(interface='eth0',bpf_filter="ip", output_file = “live_cap.pcap”) with the packets captured simultaneously by Wireshark in a pcap file, the packets in "live_cap.pcap" is much less. Please help to answer whether there is packet drop issue in the pyshark.live_capture function, or some parameter setting is wrong, how to resolve the packet missing problem? (this problem was posted in https://github.com/KimiNewt/pyshark/issues/495, no answer yet) Thanks.

Lzhou2020 avatar Sep 07 '21 06:09 Lzhou2020