Ask Your Question
0

How to display Encrypted packet length on Info column?

asked 2023-10-23 02:57:33 +0000

lucasbbs gravatar image

updated 2023-10-23 02:58:56 +0000

I would like to get the column Info from Wiresjark to display the SSH Encrypted packet len info as displayed in the following picture

image description

But actually I cannot show any info in that column as you can see in the link below.

https://drive.google.com/file/d/1eigI...

edit retag flag offensive close merge delete

Comments

It would help if you could state the Wireshark versions with which these screenshots were made.

Jaap gravatar imageJaap ( 2023-10-23 06:01:04 +0000 )edit

Jaap, I'm currently using Wireshark version 4.0.7, but I uncertain about which version this wirehark belongs to, since I have found that picture on this website.

lucasbbs gravatar imagelucasbbs ( 2023-10-23 12:00:18 +0000 )edit

Does it show "len=" with capture attached to 9006: SSH: dissect (and use) both Key Exchange Init messages?

Chuckc gravatar imageChuckc ( 2023-10-24 15:25:40 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2023-10-23 15:11:56 +0000

Jaap gravatar image

It may be because of the attempt Wireshark makes at decrypting the SSH protocol, but not falling back to the default behaviour if it can't. Then it should simply add the same information to the info column as shown above.

The picture above was probably created using Wireshark 3.6 or older, which didn't have this capability. Maybe I can have a look next week to see if this can be improved upon.

edit flag offensive delete link more

Comments

Using 4.0.10, the handshake packets add to the info column but all further encrypted packets simply show the Client: or Server: direction. I'm not sure that the display of Encrypted packet (len=xxx) adds much, presumably that was dropped at some later point.

grahamb gravatar imagegrahamb ( 2023-10-24 08:27:36 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2023-10-23 02:57:33 +0000

Seen: 191 times

Last updated: Oct 23 '23