Hello everyone, I've a packet capture with PPPoTLS (Point-to-Point Protocol over TLS) traffic in it. I'm capturing the SSL vpn traffic comming from a client to an SSL VPN server.
I was able to get the pre-master key and decrypt the traffic in wireshark successfully. However, once decrypted, wireshark doesn't seem to recognize the PPP traffic inside TLS.
All wireshark displays is "Protocol: HTTP, Info: Continuation", in the HTTP layer I see only Data with hex values in it. I tried to : right click on a packet > decode as.. > and change from HTTP to PPP, but PPP is not even an option.
Could you please help me to make wiresharke display the PPP traffic ?
Many thanks, Karim