Wireshark-users: Re: [Wireshark-users] Where is wireshark config file?
Date Prev · Date Next · Thread Prev · Thread Next
From: Peng Yu <pengyu.ut@xxxxxxxxx>
Date: Tue, 2 Mar 2021 00:17:36 -0600
Hi Graham,

>> When I run tshark, I see something like this. This pem file was loaded
>> once in wireshark, but it is now gone. Which file stores such
>> information? And how to remove it from my system?
>>
>> $  tshark
>> tshark: Error loading table 'TLS Decrypt': ssl_keys:2: File
>> '/tmp/pcap_xx.pem' does not exist or access is denied.
>>
>>
> From your default profile, try "tshark -G folders" to see the list of
> locations.

I see this. It says not to modify it. What should I do to fix the problem?

$ cat ~/.config/wireshark/ssl_keys
# This file is automatically generated, DO NOT MODIFY.
"0.0.0.0","443","http","/tmp/pcap_32_server_private_key.pem",""

-- 
Regards,
Peng