Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 9515] TLSV1 "Ignored Unknown Record"

[bugzilla-daemon@xxxxxxxxxxxxx]

Daniël van Eeden changed bug 9515

What	Removed	Added
Status	UNCONFIRMED	CONFIRMED
CC		wireshark@myname.nl
Ever confirmed		1

Comment # 7 on bug 9515 from Daniël van Eeden

This also happens with MySQL traffic. Wireshark tries to decode all packets as
SSL. As the initial MySQL handshake packets are not encrypted this will result
in "Ignored Unknown Record".

The solution could be this:
1. If the packet doesn't contain SSL records then try to decode the packet
directly as the protocol which should be within the SSL payload and/or the
protocol which we expect for this port.

2. Watch for a trigger (STARTTLS command or similar) and only try to decode
packets after this command.

---

      You are receiving this mail because:

• You are watching all bug changes.