title: Pyshark does not show \r\n\r\n in the HTTP header and instead shows \r\n
body: <p>I am using <a href="https://github.com/KimiNewt/pyshark" rel="nofollow noreferrer">pyshark</a> to parse .pcap files specifically with HTTP packets. Unlike as in Wireshark, where it shows the <code>\r\n\r\n</code> bytes at the end of the HTTP header, pyshark does not show them and instead shows a single <code>\r\n</code>.</p>
  <p>Is there any way to properly parse the HTTP layer of the packet to display the <code>\r\n\r\n</code>'s?
  If so, how? I have done a fair amount of searching through the web but the sources are limited and does not answer my question.</p>
  <p>Also, with pyshark, the headers do not come in the same order as seen on Wireshark. Is there any reason to that as well?</p>
  <p><strong>Python code</strong></p>
  <pre class="lang-py prettyprint-override"><code>#!/bin/env python3
  
  import pyshark
  
  packets = []
  with pyshark.FileCapture('testing-mutillidae1.pcap') as capture:
      for pkt in capture:                 # storing packets in list
          packets.append(pkt)
  
  print(packets[3])                       # printing packet details of packet no. 4
  
  </code></pre>
  <p><strong>HTTP header</strong></p>
  <blockquote>
  <p>I have included the full output of the packet on pastebin: <a href="https://pastebin.com/qxjxY6Hw" rel="nofollow noreferrer">https://pastebin.com/qxjxY6Hw</a> . Since it is too long, I have added only the HTTP layer in this question</p>
  </blockquote>
  <pre><code>Layer HTTP:
          GET /mutillidae/index.php?page=add-to-your-blog.php HTTP/1.1\r\n
          Expert Info (Chat/Sequence): GET /mutillidae/index.php?page=add-to-your-blog.php HTTP/1.1\r\n
          GET /mutillidae/index.php?page=add-to-your-blog.php HTTP/1.1\r\n
          Severity level: Chat
          Group: Sequence
          Request Method: GET
          Request URI: /mutillidae/index.php?page=add-to-your-blog.php
          Request URI Path: /mutillidae/index.php
          Request URI Query: page=add-to-your-blog.php
          Request URI Query Parameter: page=add-to-your-blog.php
          Request Version: HTTP/1.1
          Host: 10.0.2.13\r\n
          User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0\r\n
          Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n
          Accept-Language: en-US,en;q=0.5\r\n
          Accept-Encoding: gzip, deflate\r\n
          Referer: http://10.0.2.13/mutillidae/index.php\r\n
          Connection: keep-alive\r\n
          Cookie: showhints=0; PHPSESSID=511be46cfd6922ff8sqqhtqmbn\r\n
          Cookie pair: showhints=0
          Cache-Control: max-age=0\r\n
          Full request URI: http://10.0.2.13/mutillidae/index.php?page=add-to-your-blog.php
          HTTP request 1/1
          \r\n
          Upgrade-Insecure-Requests: 1\r\n
          Cookie pair: PHPSESSID=511be46cfd6922ff8sqqhtqmbn
  </code></pre>
  <p><a href="https://i.stack.imgur.com/hCFLx.png" rel="nofollow noreferrer">Here is the screenshot on my wireshark (I cannot post pictures yet)</a></p>