This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I tried to save the decrypted data as a pcap file. But when I opened it it's still a encrypted one.Will it be possible to save the decrypted wireshark file? Thanks in Advance

asked 21 May '13, 00:21

Kalai's gravatar image

Kalai
165510
accept rate: 0%


Will it be possible to save the decrypted wireshark file?

no, unfortunately that feature is not implemented. Wireshark will only show the decrypted data, but it is unable to save it into a (new) pcap file.

Regards
Kurt

permanent link

answered 21 May '13, 00:24

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Whith the new export PDU functionality it will be possible to implement. It's only implemeted for SIP and Diameter currently it will also "cut off" all the lower layers e.g. the layer above SSL could be output to a new file.

(21 May '13, 05:57) Anders ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×319
×165

question asked: 21 May '13, 00:21

question was seen: 2,792 times

last updated: 21 May '13, 05:57

p​o​w​e​r​e​d by O​S​Q​A