Wireshark-bugs: [Wireshark-bugs] [Bug 8925] Can't edit esp_sa file to decrypt ESP packets
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 24 Feb 2016 10:38:34 +0000

changed bug 8925


What Removed Added
CC   martin.r.mathieson@googlemail.com

Comment # 3 on bug 8925 from 
One way, which I realise may not be possible or convenient (or safe), is to
call the function esp_sa_record_add_from_dissector() from a private dissector
which is receiving new key information while the capture is running.  This
worked well for me.

Your change seems fine, except that I wonder if people will realise what a UAT
preference is.  Would it be possible to reload all preferences?

Also, won't reloading these preference settings require the whole capture so
far to be re-dissected?  This was one of the reasons for adding
esp_sa_record_add_from_dissector().  Although you don't end up with the key
information in the esp_sa file, the capture is self-contained as it'll re-add
the keys in time when your private dissector sees them.

You are receiving this mail because:
  • You are watching all bug changes.