Wireshark-dev: Re: [Wireshark-dev] (New to Wireshark) How does wireshark determine what protoco
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Mon, 15 Oct 2007 19:10:54 -0600
On Mon, Oct 15, 2007 at 04:03:12PM -0400, Justin Seto wrote:

> I have tried changing the ports and it does recognize the packets as
> SSL packets.  However, the data isn't being parsed so it looks like
> I'm "forcing" the packet to be recognized as SSL data.  Is it possible
> for This to happen?

If I understand you correctly, the SSL packets are now recgonized but
not being decrypted, right?  The decryption is only possible if you have
the server's SSL certificate on the machine running Wireshark and
configured in the SSL preferences.  See: http://wiki.wireshark.org/SSL


Steve