This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I wanted to print the destination IP address of a packet to a file if the decoder variable is created after the cipher key exchange. i.e final output would be a file with a list of ip addresses.

To do so, I added code at the function static gint dissect_ssl3_record()

fprintf(f,"%s",address_to_str(NULL,(const guint8 *)session->srv_addr.data));

I have been unable to print out the IP address in numeric form so far.

Could someone please point me out how to print the destination ip address correctly in the ssl dissector.

asked 23 Nov '16, 00:33

mac9393's gravatar image

mac9393
36449
accept rate: 0%

edited 05 Dec '16, 11:50


This should work once you call it after ssl_set_server() has been called. There is also pinfo->dst and pinfo->src which might be useful as alternative when you know the side.

permanent link

answered 05 Dec '16, 13:35

Lekensteyn's gravatar image

Lekensteyn
2.2k3724
accept rate: 30%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×319
×56
×16
×6
×2

question asked: 23 Nov '16, 00:33

question was seen: 1,051 times

last updated: 04 Jan '17, 06:44

p​o​w​e​r​e​d by O​S​Q​A