Hello, i want to extract the hex data from this SSL but when i type tshark -Vnr -r pcap -R (filter) > textfile i only get the details of the pcap without the hex part so i want to know if there is a way to extract the hex data with the details not the details only, i don't want to decrypt or anything i just want to extract it to a plain text, thanks.!
asked 30 Sep '13, 04:35
Have you tried using the "-x" command line option?
In your case:
answered 30 Sep '13, 13:42
O.K. please check these similar questions:
see my (last) comment regarding disabling protocols to get the payload!
answered 30 Sep '13, 07:16
Kurt Knochner ♦
edited 30 Sep '13, 07:17