python - 使用 pyshark 从 SMTP 数据包中获取“To”和“From”字段

Question

如何从与流隔离的 SMTP 数据包中获取“收件人”和“发件人”类别。

import pyshark

fileBuffer = pyshark.FileCapture(pcapDirectory)
samplePacket = fileBuffer[SMTP_Packet_Location]

# Get to and from fields

Answer 1

我找到了以下解决方案：

fileBuffer = pyshark.FileCapture(pcapDirectory)
samplePacket = fileBuffer[SMTP_Packet_Location]
print(samplePacket.smtp.get_field_value("req_parameter"))

输出：

TO: <exampleEmail@provider.com>