Wireshark · Wireshark-dev: [Wireshark-dev] Malformed Packet (Exception occurred) during SSL decoding, Follow SSL stream empty

[Jerome M <jahrome11@xxxxxxxxx>]

Hello,


I am using Wireshark to decrypt a simple SSL exchange, and it appears 
that the 'Follow SSL stream' dialog is empty even if each packet is 
decrypted correctly. Looking at expert info shows :
	Expert Info (Error/Malformed): Malformed Packet (Exception occurred)

There is no indication of failure in SSL debug file, decryption is done 
correctly.

I've reproduced this problem with Wireshark 1.6.2 on Ubuntu Oneiric 32 
bit (gnutls 2.10.5, gcrypt 1.5.0) and Wireshark 1.6.7 on Ubuntu Precise 
64 bit (GnuTLS 2.12.14, with Gcrypt 1.5.0).

Windows versions do not show the problem and display the decrypted SSL 
stream (no error in expert info).

Here is attached a sample capture file with test key if someone wants to 
reproduce the problem.


Thank you for your help.


Jerome

Attachment: ssl_pb.pcap
Description: application/vnd.tcpdump.pcap

Attachment: test.key
Description: application/pgp-keys