This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

SSL Decryption: only for http and few other protocols

0

Hello Team,

I can decrypt SSL inside TCP on different ports. That works fine as long at that is typical protocol like http or smtp or ldap...

But i have custom/prioprietary protocol inside that SSL. In the past i did not have any problems with that, i could see binary MSCHAPv2 session inside SSL: https://supportforums.cisco.com/servlet/JiveServlet/showImage/38-2724-125782/packet11-mod.png

But right now with version 1.10.3 i do not see it. Debugs reveal some problems - it looks like decoder for specific protocol is mandatory ?. In my configuration i have selected http because i need to select something - but it does not working. In the past i have also used "http" and as you can see on the screenshot wireshark displayed decrypted data anyway.

How can i achieve the old behavior and decrypt any protocol hidden inside SSL ?

Thanks

asked 21 Dec '13, 03:19

highland7's gravatar image

highland7
1111
accept rate: 0%


One Answer:

0

Please try data as protocol instead of http?

Regards
Kurt

answered 21 Dec '13, 07:39

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 21 Dec '13, 07:40