Wireshark-users: Re: [Wireshark-users] sftp traffic

From: Sake Blok <sake@xxxxxxxxxx>
Date: Tue, 9 Sep 2008 18:33:57 +0200

On Tue, Sep 09, 2008 at 04:24:42PM +0200, Riccardo Roasio wrote:
> 
> there is a  way to sniff and decrypt sftp traffic having the server 
> private key?

By sftp you mean "ftp over ssh" or "SSH file transfer protocol"? In
both cases the encryption is done by the SSH protocol. AFAIK there is
no support yet for decryption SSH traffic, so that means that there
is no support for decryption of sftp... yet (it will be there when
someone finds the time to develop this functionality).

Cheers,
    Sake