Wireshark · Wireshark-users: Re: [Wireshark-users] Trying to decode sshv2 traffic

[Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>]

On 06/17/14 12:59, Ahmed Zaki wrote:
> Dear All,
>
> I captured SSHV2 trace file between two servers, I want to see the
> decrypted packets.
>
> Any ideas about how I can decrypt the packets?
>
> I believe it is possible to collect the public keys from both servers,
> Is this going to help?

Unfortunately, no.  The SSH dissector in Wireshark is not able to 
decrypt SSH packets.

See:

http://wiki.wireshark.org/SSH