I want to know solution/answer for 2 of my questions.
1) When i apply ssl decryption for a trace, some of the packets and traffic doesn't get decrypted. What could be the possible reason for this? I have not observed it many times but i have recently observed it for one of the trace.
2) When we do "follow SSL stream" or "follow TCP stream", a sub-window opens where we could see the request and response data being sent ( which is easily readable and is in plain text). Here I am not referring to the filtered traffic which appears on the Wireshark interface.Hopefully, you can understand to what i am referring to. Now, here is my 2nd question -
When i do "follow SSL stream" for
different streams, it shows same kind of data (request and response) for all the streams. Ideally it should show different kind of data for different SSL streams. Is it a bug with Wireshark.?