This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

can otr be detected using wireshark?

0

I'm running spark on openfire server and communicating to another client using otr. Is it possible to detect this using wireshark?

asked 15 Aug '12, 23:21

mv93's gravatar image

mv93
1111
accept rate: 0%


One Answer:

0

Spark tries to use TLS by default and Openfire has TLS enabled by default, as optional parameter for the client connection (Admin Console -> Server -> Server Settings -> Security Settings -> Client Connection Security -> Custom -> TLS method).

So, you cannot read the clear text communication (XMPP) between a spark client and openfire and thus you cannot detect the use of OTR.

If you disable TLS at the server (NOT a good idea !!), you can read the whole XMPP protocol and then you can detect the use of OTR. OTR messages start with '?OTR:'.

type="chat"><body>?OTR:AAICAAAAxPyhsiLRM2ftQHjc88ySmNGjQUiYJEWB...

Regards
Kurt

answered 16 Aug '12, 07:26

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 16 Aug '12, 07:27