Hi Graham,
>> When I run tshark, I see something like this. This pem file was loaded
>> once in wireshark, but it is now gone. Which file stores such
>> information? And how to remove it from my system?
>>
>> $ tshark
>> tshark: Error loading table 'TLS Decrypt': ssl_keys:2: File
>> '/tmp/pcap_xx.pem' does not exist or access is denied.
>>
>>
> From your default profile, try "tshark -G folders" to see the list of
> locations.
I see this. It says not to modify it. What should I do to fix the problem?
$ cat ~/.config/wireshark/ssl_keys
# This file is automatically generated, DO NOT MODIFY.
"0.0.0.0","443","http","/tmp/pcap_32_server_private_key.pem",""
--
Regards,
Peng
