I have some http traffic which happens to be served compressed, chunked and encrypted. I have the client master-secrete and CLIENT_RANDOM, so I am using that to decrypt the traffic. I'm using a bleeding edge build (win32-2.1.0-132-g3ef2fd6) as it seems to supports combined dechunking, decompression and decryption well. Everything works in the wireshark GUI, but it would be convenient to be able to export the plain text of the HTTP request and response using
However, with
Which returns something like:
Is there a way to get the non-truncated text using asked 16 Oct '15, 14:05 dishesmolasse |
One Answer:
Please see my answer to a similar question: I did not try, but maybe the 'follow' option might work as well in 2.1.0 incl. decompression (as I said, not tested, just speculation).
Please replace 1 with the correct TCP stream number. Regards answered 19 Oct '15, 16:35 Kurt Knochner ♦ edited 19 Oct '15, 16:49 |