This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

DECRYPTION

0

Hello guys,

i want to know the information received from various packets but a lot of protocols like DNS ARP NBNS etc send their information in encrypted form so i want to know how to decrypt that information.

i appreciate all the help i get thanks

asked 09 Dec '16, 19:33

beginner%20in%20hacking's gravatar image

beginner in ...
6112
accept rate: 0%


One Answer:

1

ARP and NBNS packets aren't encrypted, so there's no decryption to be done.

They're not text packets, but that's why programs such as tcpdump, snoop, Sniffer, {Ether,Token,Airo,Omni}Peek, Wireshark, etc. exist - they read the binary packet data and display it in a form more easily understood by humans.

answered 09 Dec '16, 20:01

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%