Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Embed SSL keylog file in pcap-ng

From: Ahmad Fatoum <ahmad@xxxxxx>
Date: Fri, 4 May 2018 19:07:49 +0200
> On 4May 2018, at 01:13, Ben Higgins <ben@xxxxxxxxxxxx> wrote:
> 
> What I'd like to do is instead create a new pcap-ng block type that we can put SSL keylog file contents into verbatim.

How about a generic "Wireshark dissector preferences" pcapng block with { pref.key => value } tuples?
e.g. { ssl.keys_list => "127.0.0.1,4443,http,/home/dirkx/xx/privkey.pem" }


And when the capture file is closed, overridden preferences are reset.

Cheers
Ahmad