Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version
  1. I would say yes, e.g., there are UATs (User Access Tables) where key material is stored in order to decrypt data streams; Wireshark can use SSL key dump files to use in decryption; remote capture setup information may contain key information.

  2. There are no (hidden or otherwise) options to add header/footer (e.g., classification) to printed material.

PS: Do not forget to include NPcap into your evaluation, the capture engine slated as the replacement for WinPcap.