This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

how to read XML from SSL debug file (generated by tshark during SSL decryption)

0

I am successful in decrypting the SSL trafic using the tshark command below.

tshark -o "ssl.desegment_ssl_records: TRUE" -o "ssl.desegment_ssl_application_data: TRUE" -o "ssl.keys_list: (Servers's ip),443,http,cert.pkf" -o "ssl.debug_file: ssldebug.log" -i eth1 -R "tcp.port == 443" -V -w Wireshark.pcap

The SSL debug file has the payload XML messge, which is being exchanged between the applications. Now, I'm struggling on how to retrieve the XML message from SSL debug file. I tried using:

tshark -r wireshark.log -Xlua_script:luaListener.lua "xml"

but it didn't generate any XML file. How do I get the XML?

asked 31 May '12, 05:26

vikram's gravatar image

vikram
417813
accept rate: 0%

edited 05 Jun '12, 17:38

helloworld's gravatar image

helloworld
3.1k42041