Repository navigation
fix(dumpkit): plist output is unreadable by plistlib because timestamps carry fractional seconds #1448
Description
Bug. format='plist' output cannot be read back with plistlib. Timestamps are written as %Y-%m-%dT%H:%M:%S.%fZ, and the fractional seconds are rejected.
Repro on main (78991b7d5), and on every capture:
extract(fin='examples/captures/arp.pcap', fout='o', format='plist')
plistlib.load(open('o.plist', 'rb'))
# AttributeError: 'NoneType' object has no attribute 'groupdict'- Source: the writer in the
dictdumperdependency, atdictdumper/plist.py:278. - Fix location: either upstream there, or in
pcapkit.dumpkit's plist wrapper. - Prior knowledge: this was only known as an untracked
@unittest.skipintests/integration/test_output_formats.py.
Found by #1445 (#1202), where it is listed in KNOWN_FAILURES.
Activity
JarryShaw commentedon Oct 9, 2026
A worker is on it now, on branch
fix/1448-plist-timestamp.test: capture-driven parse→rebuild and dumper round trips (#1202)
fix(dumpkit): write plist dates to whole seconds so plistlib reads th…
fix(dumpkit): write plist dates to whole seconds so plistlib reads th…
fix(dumpkit): write plist dates to whole seconds so plistlib reads th…
test: capture-driven parse→rebuild and dumper round trips (#1202) (#1445
fix(dumpkit): write plist dates to whole seconds so plistlib reads th…
fix(dumpkit): write plist dates to whole seconds so plistlib reads th…
fix(dumpkit): write plist dates to whole seconds so plistlib reads th…