Decrypting QUIC packets on Wireshark

asked 2021-02-04 16:19:04 +0000

Zohar8395
1 ●1 ●1 ●1

Hi, I'm using Google Chrome browser version 88 and the latest Wireshark version. When I capture Quic packets I can only see The handshake and then all the rest of the packet are "Protected payload". Adding TLS key txt file does not help to the decrypt the packets. Is there any way to do that? I saw very few guides on the web, none of them worked for me. Thanks in advance.

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2021-02-04 16:53:01 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23835 ●4 ●976 ●227 https://www.wireshark.org

QUIC decryption is a work in progress at the moment. Note that as per this Issue you need Chrome 89 or later to obtain the QUIC secrets in the SSLKEYLOGFILE but I can't find another reference for that.

More info (technical) about QUIC support in Wireshark here.

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-02-04 16:19:04 +0000

Seen: 15,407 times

Last updated: Feb 04 '21

Decrypting QUIC packets on Wireshark edit

1 Answer