Hi & welcome to Scapy's github ! This page lists issues that you can try to fix if you want to start contributing to Scapy.

This list includes wishes and things added by the maintainers based on the issues that we get, but also issues marked with TODO or XXX that already exist in Scapy's code base (layers). If you want to contribute to the project you might just take care one of the bugs.

change all x-moloch-cookies to x-arkime-cookies in tests and middleware 😋

zeek/zeek@3769ed6 started introducing 0 to the ssh version field for client\server mismatches without documenting the change in behavior.

We do not match on:

google.com

Because there is no HTTPS at the start.

The solution is to build a list of all top level domains ( see https://data.iana.org/TLD/tlds-alpha-by-domain.txt for all of them in a neat text file) and match only if the end matches a TLD.

An example regex is:

.*\.com|\.org

Which matches:

tryhackme.com

Today a user needs to uninstall BruteShark using the control panel before installing a new version.
Using the WiX installer enable to upgrade the installation if the version is higher than the current version.

The project works with 8 modules < reference source/Module >

• Creating issue to accelerate/track test frame building of each module
• The test folder has a very basic example to start with.
• Feel free to make a pull request for the test cases

I'm trying a simple test with tcpliveplay but it seems tcpliveplay doesn't handle TCP handshake properly.
Let me describe the steps from my testing.

1. Logged as root on machine A I ran this command to capture all the traffic to the host 104.31.95.22 (my website).

# tcpdump host 104.31.95.22 -n -s 65535 -w http.pcap

2. In another shell instance under the same machine I performed a