ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 8092] New: SSL Dissector Tweaks

Date: Fri, 14 Dec 2012 22:10:58 +0000
Bug ID 8092
Summary SSL Dissector Tweaks
Classification Unclassified
Product Wireshark
Version 1.9.x (Experimental)
Hardware x86
OS Windows XP
Status UNCONFIRMED
Severity Normal
Priority Low
Component Wireshark
Assignee [email protected]
Reporter [email protected]
Attachment #9701 Flags review_for_checkin?

Created attachment 9701 [details]
The bug description says it all.

Build Information:
Version 1.9.0 (SVN Rev 46539 from /trunk)

Copyright 1998-2012 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.10, with Cairo 1.10.2, with Pango 1.30.0, with
GLib 2.32.2, with WinPcap (4_1_2), without libz, without POSIX capabilities,
without libnl, with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python,
with GnuTLS 2.12.18, with Gcrypt 1.4.6, with MIT Kerberos, with GeoIP, with
PortAudio V19-devel (built Dec 14 2012), with AirPcap.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.2
(packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, without AirPcap.

Built using Microsoft Visual C++ 10.0 build 40219

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
The attached patch enhances the SSL dissector in the following ways:

- Adds the ssl.segment.data and ssl.reassembled.data fields, which can be used
to search, filter, or export decrypted application layer data.
- Improves readability of the hex/ASCII data blocks written to the SSL debug
log by vertically aligning the separator pipes by not printing tabs and
inserting white space padding in the final line of block output if necessary.


You are receiving this mail because:
  • You are watching all bug changes.