I created a wireshark 2.1.0 build in my local (Ubuntu 14.04). The problem is that I can't set the SSL priviate key or session key in configuration: Here is the version info on this Wireshark build. Wonder what's wrong here.
asked 01 Jun ‘16, 15:36 pktUser1001 edited 01 Jun ‘16, 16:12 Guy Harris ♦♦ |
One Answer:
And, therefore, without the ability to decrypt SSL/TLS. I'm assuming that you're building Wireshark with the Ubuntu developer packages for various libraries it requires. If so, you'll need to get the developer packages for GnuTLS and Gcrypt and install them, and then re-configure and rebuild, so that you get a version of Wireshark that does have the ability to decrypt SSL/TLS. And, while we're at it:
If you expect to be looking at SNMP traffic, a version built with libsmi would be able to read MIBs and do a better job of parsing SNMP requests and responses.
A version built with the Lua library can run Lua scripts as packet dissectors, statistics taps, etc., so it's able to use some third-party tools that a version without Lua can't, and, if you're a Lua programmer, it'd let you write your own tools of that sort.
Which may get in the way of decrypting some traffic encrypted with the aid of Kerberos.
Which I think is what's used for the audio player for some VoIP protocols. So you might want to load the appropriate versions of some other developer libraries. answered 01 Jun '16, 16:08 Guy Harris ♦♦ |
Thanks Guy for the analysis!