How can I extract parameters from pcap

asked 2018-02-06 08:34:25 +0000

anonymous user

Anonymous

updated 2018-02-06 09:11:39 +0000

I have a pcpa file for TLS handshake messages. I need to pares it to extract parameters values. Are there any tools? libraries (preferably Java or python) to do this?

|
     |
     |
     |  Handshake Layer
     |
     |
- ---+----+----+----+----+----+----+------+----+----------+--------+-----------+----------+
     |  1 |    |    |    |    |    |32-bit|    |max 32-bit| Cipher |Compression|Extensions|
     |0x01|    |    |    |  3 |  1 |random|    |session Id| Suites |  methods  |          |
- ---+----+----+----+----+----+----+------+----+----------+--------+-----------+----------+
  /  |  \    \---------\    \----\             \       \
 /       \        \            \                \   SessionId
record    \     length        SSL/TLS            \
length     \                  version         SessionId
            type: 1       (TLS 1.0 here)       length
edit retag flag offensive close merge delete