After decrypting the TLS message by sslkey.log, I want to perform Protobuf protocol parsing on the decrypted data. but the custom protocol parsing plugin cannot be found in the "Decode As" dialog, and there are only a few protocols are available to choose from.
What exactly is the protocol on top of TLS? Is it a custom protocol that contains Protobuf, is it Protobuf directly, or is it something else (e.g., gRPC on top of TLS which contains Protobuf)? The way you worded the question is confusing.
If it's a custom protocol, then you have to add your custom protocol to the table for TLS; it doesn't list all possible protocols by default (there are thousands in Wireshark and some of them would not work at all if called from TLS) only those that are found over TLS.
Asked: 2025-03-07 05:15:50 +0000
Seen: 185 times
Last updated: Mar 07
Does it appear in
Help -> About Wireshark:Pluginstab?