Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] SSL issue not decoding data

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 1 May 2008 17:27:05 -0700


On May 1, 2008, at 2:54 PM, Sake Blok wrote:

This line indicates that the SSL session at hand is actually a reused
SSL session with a short handshake. Wireshark needs the full SSL handshake
to be able to calculate all the keys.

Should this somehow be indicated in the UI - possibly even in the dissection itself, so it's indicated in both Wireshark and TShark - so that it's more obvious why you're not getting any decryption done?

  • Follow-Ups:
    • Re: [Wireshark-users] SSL issue not decoding data
      • From: Sake Blok
  • References:
    • [Wireshark-users] SSL issue not decoding data
      • From: jacob c
    • Re: [Wireshark-users] SSL issue not decoding data
      • From: Sake Blok
  • Prev by Date: Re: [Wireshark-users] Is it possible to back-uppacketcapturesindefined time interval
  • Next by Date: Re: [Wireshark-users] SSL issue not decoding data
  • Previous by thread: Re: [Wireshark-users] SSL issue not decoding data
  • Next by thread: Re: [Wireshark-users] SSL issue not decoding data
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation