Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 10984] SSL Decrypted Packet Not Decoded As HTTP

[bugzilla-daemon@xxxxxxxxxxxxx]

Comment # 10 on bug 10984 from Jeff Morriss

(In reply to Peter Wu from comment #9)
> As it stands now there are at least three protocols running over SSL on port
> 443: HTTP, HTTP2 and SPDY. ALPN and HTTP Upgrade partially helps, but
> wouldn't it be great if you could override the automatically detected
> protocol via a "Decode SSL As" option? ("Overrides the SSL Application Data
> protocol"). (I have been thinking about this for a day, rejecting it because
> it work arounds an issue in the dissector detection and because it does not
> scale for multiple streams, but on the other hand it gives an easy way to
> override the dissector set in the UAT dialog or things like SPDY/HTTP2
> mixups).

Agreed that would be a significant improvement--regardless of any other
improvements that could be made.  When in doubt, let the (otherwise frustrated)
user override. :-)

Of course being automatic would be even better.

Maybe if the subdissectors were new-style (this is like being heuristic but I
think the model is cleaner if you think about it as "new style")?  I suppose
with these protocols it might be necessary to set up conversation data and/or,
as you said, only "try" the dissectors on the first PDU.

---

      You are receiving this mail because:

• You are watching all bug changes.