Pairing http requests and responses

[mattfysh]

I'm parsing PCAP files containing HTTP transactions, and hoping to generate a list of http requests & responses within.

I'm not sure how to perform matching to create the pairs, or how to access the data consistently in a variety of use cases, ie:

1. regular http
2. https (decoded usingssl.keylog_file)
3. socket re-use via TCP and HTTP keepalive
4. http2 (where some responses may not have a matching request, due to the push model)
5. a large http response that spans multiple packets

I find that if I write code that works for one scenario, I then try to use it on another but it fails, e.g. trying to access a missing attribute.

Are there any examples that show how to consistently parse any pcap file and reliably extract http transactions?