Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-bugs: [Wireshark-bugs] [Bug 4572] ssl decode problems

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 12 Mar 2010 00:11:58 -0800 (PST)

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4572

Sake <sake@xxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID

--- Comment #2 from Sake <sake@xxxxxxxxxx> 2010-03-12 00:11:56 PST ---
The problem with your trace file is that it contains duplicate packets for all
client traffic. This breaks SSL decryption. You can use "editcap -d" to create
a new capture file without the duplicates and then SSL decryption works for the
client traffic too:

MacSake:Downloads sake$ editcap -d rui.cap rui2.cap
1122 packets seen, 331 packets skipped with duplicate window of 5 packets.
MacSake:Downloads sake$

Hope this helps!

(I'm closing this bug...)

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

  • References:
    • [Wireshark-bugs] [Bug 4572] New: ssl decode problems
      • From: bugzilla-daemon
  • Prev by Date: [Wireshark-bugs] [Bug 4569] Trying to Run Wireshark as "root" causes system to completely lockup (requires hard reset)
  • Next by Date: [Wireshark-bugs] [Bug 4557] ODL.pm missing from tools/pidl
  • Previous by thread: [Wireshark-bugs] [Bug 4572] ssl decode problems
  • Next by thread: [Wireshark-bugs] [Bug 4573] New: dumpcap ring buffer options do not assert
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation