I am trying to setup the SSL Decryption feature of WireShark using version 0.99.4. I have been unsuccessful in get the decryption to work so far. I have included the SSL Debug file in the email. I believe the problem is that WireShark is automatically adding associations that are overriding mine.

ssl_init keys string 172.16.4.17,443,data,C:\jxdeploy\certificates\jxmain(server).pem

ssl_init found host entry 172.16.4.17,443,data,C:\jxdeploy\certificates\jxmain(server).pem

ssl_init addr 172.16.4.17 port 443 filename C:\jxdeploy\certificates\jxmain(server).pem

ssl_get_version: 1.5.1

ssl_init private key file C:\jxdeploy\certificates\jxmain(server).pem successfully loaded

association_add TCP port 443 protocol data handle 028E7E98

association_find: TCP port 443 found 03CEBB48

ssl_association_remove removing TCP 443 - data handle 028E7E98

association_add TCP port 443 protocol http handle 02931F68

association_find: TCP port 636 found 03CAB200

ssl_association_remove removing TCP 636 - ldap handle 0456A9D8

association_add TCP port 636 protocol ldap handle 0456A9D8

association_find: TCP port 993 found 03CB2718

ssl_association_remove removing TCP 993 - imap handle 0293FB18

association_add TCP port 993 protocol imap handle 0293FB18

association_find: TCP port 995 found 03CB29D0

ssl_association_remove removing TCP 995 - pop handle 046D78D0

association_add TCP port 995 protocol pop handle 046D78D0

Does anyone know why WireShark is loading 443 to HTTP, 636 to LDAP, 993 to IMAP and 995 to POP? I need 443 associated to something else.

Thanks for your help,

James P Hughes

James P Hughes

Jack Henry & Assoc.

7400 Cahaba Valley Road

Birmingham, AL 35242

ph(205)981-1980

fx(205)981-1884