This is our old Q&A Site. Please post any new questions and answers at

I tried to save the decrypted data as a pcap file. But when I opened it it's still a encrypted one.Will it be possible to save the decrypted wireshark file? Thanks in Advance

asked 21 May '13, 00:21

Kalai's gravatar image

accept rate: 0%

Will it be possible to save the decrypted wireshark file?

no, unfortunately that feature is not implemented. Wireshark will only show the decrypted data, but it is unable to save it into a (new) pcap file.


permanent link

answered 21 May '13, 00:24

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
accept rate: 15%

Whith the new export PDU functionality it will be possible to implement. It's only implemeted for SIP and Diameter currently it will also "cut off" all the lower layers e.g. the layer above SSL could be output to a new file.

(21 May '13, 05:57) Anders ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 21 May '13, 00:21

question was seen: 3,018 times

last updated: 21 May '13, 05:57

p​o​w​e​r​e​d by O​S​Q​A