I am currently debugging Wireshark to find out the field in which the SSH packet data is stored. I have my breakpoint in the function:
ssh_dissect_ssh2(tvbuff_t *tvb, packet_info *pinfo, struct ssh_flow_data *global_data, int offset, proto_tree *tree, int is_response, gboolean *need_desegmentation)
Can someone of you tell me where the data is stored? I cannot find it...
