This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi All,

I am new to networking and using wire shark and I am trying to decrypt SSL/TLS traffic, but I don't see either the Frame or Decrypted SSL data tabs at the bottom of the screen.

I am using WS version 2.2.1.

Any help would be great.

Adam

asked 16 Dec '16, 05:47

Adam-C's gravatar image

Adam-C
6113
accept rate: 0%

edited 16 Dec '16, 05:49

What have you tried?

(19 Dec '16, 10:41) Lekensteyn

Hi,

I was following this tutorial: https://support.citrix.com/article/CTX116557

But get stuck at the point 6 the part where I need to click on the decrypt SSL TLS data tab as I don't have one, looking at the screen shot in the tutorial I don't have a frame tab either.

(20 Dec '16, 06:52) Adam-C

It would seem that decryption has failed for you. What is the cipher in use? Have you confirmed it's not a DH one? See the note at the top of the tutorial.

There is also the Wireshark wiki page on SSL that has some test captures that can be decrypted, see here.

permanent link

answered 20 Dec '16, 07:18

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

(I converted Graham's comment to an answer because, generically, it is an answer: decryption has likely failed. To know the specific reason we'd need to see the capture file.)

(03 Jan '17, 15:16) JeffMorriss ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×42
×3

question asked: 16 Dec '16, 05:47

question was seen: 4,385 times

last updated: 03 Jan '17, 15:16

p​o​w​e​r​e​d by O​S​Q​A