This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to gradually encrypt the output capture file?

0

How can I make past captured packet utterly unavailable without a certain password?

My current strategy is to run tshark rotatively and run a background script that encrypt all those files.

But there are security issues with this technique since the password is contained in the encrypting script.

asked 24 Nov '16, 07:02

user987987987's gravatar image

user987987987
6113
accept rate: 0%


One Answer:

1

Create a Public/Private key pair and put the capture files through GPG

Where you capture the data use your Public key to encrypt the data, so that you can only decrypt it with your Private key, which you keep separate of course.

answered 24 Nov '16, 07:23

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%