Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] Dissector for decryted content

From: Jose Selvi <jselvi@xxxxxxxxxxxx>
Date: Wed, 21 Feb 2018 17:07:02 +0100
Hi there,

It's my first time developing a dissector, so apologize in advance if my
question is too obvious for you guys.

I'm trying to code a dissector (I'm using LUA) for a quick test. It
should match a piece of traffic inside a ESP tunnel. I have seen that
other dissectors are working inside the decrypted content, but not mine.

Browsing forums, I found this:

https://osqa-ask.wireshark.org/questions/58217/how-do-i-dissect-decrypted-ssl-data-when-im-using-a-master-secret-log

However, I can't find similar options for ESP, so I guess it only works
for SSL.

Any hint will be more than welcomed.
Cheers.