This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Missing Frame and Decrypted SSL data tabs WS v2.2.1

0

Hi All,

I am new to networking and using wire shark and I am trying to decrypt SSL/TLS traffic, but I don't see either the Frame or Decrypted SSL data tabs at the bottom of the screen.

I am using WS version 2.2.1.

Any help would be great.

Adam

asked 16 Dec '16, 05:47

Adam-C's gravatar image

Adam-C
6113
accept rate: 0%

edited 16 Dec '16, 05:49

What have you tried?

(19 Dec '16, 10:41) Lekensteyn

Hi,

I was following this tutorial: https://support.citrix.com/article/CTX116557

But get stuck at the point 6 the part where I need to click on the decrypt SSL TLS data tab as I don't have one, looking at the screen shot in the tutorial I don't have a frame tab either.

(20 Dec '16, 06:52) Adam-C

One Answer:

0

It would seem that decryption has failed for you. What is the cipher in use? Have you confirmed it's not a DH one? See the note at the top of the tutorial.

There is also the Wireshark wiki page on SSL that has some test captures that can be decrypted, see here.

answered 20 Dec '16, 07:18

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

(I converted Graham's comment to an answer because, generically, it is an answer: decryption has likely failed. To know the specific reason we'd need to see the capture file.)

(03 Jan '17, 15:16) JeffMorriss ♦