cannot found custom protocol parsing plugin after tls decryption

asked 2025-03-07 05:15:50 +0000

shaojun lyu gravatar image

updated 2025-03-07 05:16:56 +0000

After decrypting the TLS message by sslkey.log, I want to perform Protobuf protocol parsing on the decrypted data. but the custom protocol parsing plugin cannot be found in the "Decode As" dialog, and there are only a few protocols are available to choose from. image description

edit retag flag offensive close merge delete

Comments

custom protocol parsing plugin cannot be found

Does it appear in Help -> About Wireshark:Plugins tab?

Chuckc gravatar imageChuckc ( 2025-03-07 18:00:34 +0000 )edit

What exactly is the protocol on top of TLS? Is it a custom protocol that contains Protobuf, is it Protobuf directly, or is it something else (e.g., gRPC on top of TLS which contains Protobuf)? The way you worded the question is confusing.

If it's a custom protocol, then you have to add your custom protocol to the table for TLS; it doesn't list all possible protocols by default (there are thousands in Wireshark and some of them would not work at all if called from TLS) only those that are found over TLS.

johnthacker gravatar imagejohnthacker ( 2025-03-08 22:03:20 +0000 )edit