Wireshark-users: Re: [Wireshark-users] Problem with SSL decryption of Sip traffic

From: Sake Blok <sake@xxxxxxxxxx>
Date: Wed, 8 Apr 2009 10:35:07 +0200

On Wed, Apr 08, 2009 at 09:20:16AM +0100, David Beaven wrote:
> 
>    Any ideas why the SIP data is not shown in the main viewer?
> 
>    ssl_init keys string:
>    xxx.xxx.xxx.xxx,5061,SSL,c:\crud\wireshark\spc.pem

You need to use:
xxx.xxx.xxx.xxx,5061,sip,c:\crud\wireshark\spc.pem

the third field tells wireshark which protocol dissector to use on the
decrypted traffic.

Cheers,
    Sake