Hi All, I am new to networking and using wire shark and I am trying to decrypt SSL/TLS traffic, but I don't see either the Frame or Decrypted SSL data tabs at the bottom of the screen. I am using WS version 2.2.1. Any help would be great. Adam asked 16 Dec '16, 05:47  Adam-C edited 16 Dec '16, 05:49 |
One Answer:
It would seem that decryption has failed for you. What is the cipher in use? Have you confirmed it's not a DH one? See the note at the top of the tutorial. There is also the Wireshark wiki page on SSL that has some test captures that can be decrypted, see here. answered 20 Dec '16, 07:18  grahamb ♦ (I converted Graham's comment to an answer because, generically, it is an answer: decryption has likely failed. To know the specific reason we'd need to see the capture file.) (03 Jan '17, 15:16) JeffMorriss ♦ |
What have you tried?
Hi,
I was following this tutorial: https://support.citrix.com/article/CTX116557
But get stuck at the point 6 the part where I need to click on the decrypt SSL TLS data tab as I don't have one, looking at the screen shot in the tutorial I don't have a frame tab either.