This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi there,

Is there any way of NOT specifying a protocol when configuring Wireshark to automatically SSL decrypt (i.e. when adding the key to the RSA key list).

I have a custom app that uses SSL to protect its connections, and I'd just like to decrypt the textual data that is passed. Instead, for now, I just put http, wireshark lists it as "Non-HTTP traffic" and it seems things get truncated...

Thanks

asked 16 Apr '12, 04:18

nafe's gravatar image

nafe
1111
accept rate: 0%


Yes, you can use "data" as the protocol. Wireshark will then just show the decrypted data as hex data.

Hmmm... thinking of this, it might be nice to have an "ascii" dissector that one can use if the decrypted protocol is ascii. You might want to file an enhancement request for it on http://bugs.wireshark.org if the data dissector does not provide the output you need.

permanent link

answered 16 Apr '12, 04:34

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×319
×62
×11

question asked: 16 Apr '12, 04:18

question was seen: 5,334 times

last updated: 16 Apr '12, 04:34

p​o​w​e​r​e​d by O​S​Q​A