本文介绍了如何使用Scapy从包含多条TLS记录的数据包中读取并解析TLS元数据。通过手动解码Scapy识别为'Raw load'的TLS部分，可以访问每个记录的长度和其他属性。并展示了如何验证所有记录长度的总和是否等于整个TLS部分的长度。
How can I read TLS information (record length, record type...) from a packet using scapy. I have used load_layer('tls') and I'm able to read some information when there is a single TLS record in a packet but when there is multiple TLS record in a packet I'm only able to read the first TLS record.
For exemple this packet contain 3 TLS record 
and when I want to read the records length with scapy I only get the first record length 
解决方案
Total TLS decoding
As you've found, scapy doesn't decode the entire packet. But this is fine, because we can manually decode the TLS sections
最低0.47元/天 解锁文章
470
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
