I have a packet of SSL data which is in a proprietary format. The "Decrypted SSL Data" tab is open and correctly shows the decrypted data. I now need to export this decrypted data as binary. How do I do this in Wireshark 2.0.0rc1? I would expect to see an entry for unencrypted application data under TLSv1 Record Layer in the tree view (as I think was the case under Wireshark 1.12.8) so I can right click and Export Packet Bytes, but there is no such entry in the tree for unencrypted application data, only an entry for encrypted application data. I have also looked at Follow - Follow SSL, but this gives a blank dialog box. Also File - Export Packet Bytes exports the encrypted data, as you would expect. Thanks Robert asked 27 Oct '15, 05:24 ronslow |
One Answer:
I just tried Wireshark-win64-2.1.0-261-g616dbd7.exe. Follow -> SSL Stream works for the snakeoil pcap. Maybe you want to try that version. Regards answered 27 Oct '15, 06:21 Kurt Knochner ♦ edited 27 Oct '15, 06:22 |
Yup. Thanks Kurt. Upgrade solved the problem.