Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

You'll need to store the packets with the SSH protocol exchange as well for the dissector to be able to make sense of this.

What you could do is filter out the first part of the TCP stream, say with tcp.seq < 1500