Wireshark-bugs: [Wireshark-bugs] [Bug 9515] TLSV1 "Ignored Unknown Record"

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 24 Jul 2014 19:16:31 +0000

changed bug 9515

What Removed Added
Status UNCONFIRMED CONFIRMED
CC   [email protected]
Ever confirmed   1

Comment # 7 on bug 9515 from 
This also happens with MySQL traffic. Wireshark tries to decode all packets as
SSL. As the initial MySQL handshake packets are not encrypted this will result
in "Ignored Unknown Record".

The solution could be this:
1. If the packet doesn't contain SSL records then try to decode the packet
directly as the protocol which should be within the SSL payload and/or the
protocol which we expect for this port.

2. Watch for a trigger (STARTTLS command or similar) and only try to decode
packets after this command.

You are receiving this mail because:
  • You are watching all bug changes.