How to access new key files in the SSH preferences.

asked 2019-07-17 17:41:21 +0000

Hi all,

I would like to decrypt SSH using Wireshark. For this purpose, I want to add four new fields in the class packet-ssh.c in the function proto_register_ssh(void). Using, for example, the function prefs_register_string_preference(). My question is now. After the user has entered these keys in the new fields, pressed "Ok" and started the capturing of SSH packets, how can I get the entered values later on for example in the ssh_dissect_ssh2() function in packet-ssh.c class? Thanks a lot in advance!

edit retag flag offensive close merge delete

add a comment

2 Answers

Sort by » oldest newest most voted

answered 2019-07-17 18:40:30 +0000

Jaap

13730 ●684 ●115

Looking at chapter 2.6 of README.dissector in the doc directory of your source tree, you'll see that the function prefs_register_string_preference() takes as the last parameter a char pointer pointer. This is where the entered preference ends up. Have a look at other dissectors which use this same function to see how that's used.