Wireshark-bugs: [Wireshark-bugs] [Bug 11030] New: Decode as: Can't override 7275 with "SSL", cha

Date: Fri, 06 Mar 2015 17:10:36 +0000
Bug ID 11030
Summary Decode as: Can't override 7275 with "SSL", changes lost
Product Wireshark
Version 1.99.x (Experimental)
Hardware x86
OS Mac OS X 10.10
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Build Information:
Version 1.99.2 (v1.99.2-0-gb2db3bf from master)
--
I have a trace of SUPL sessions which I want to look at. This is ULP encrypted
with SSL/TLS. (Before you ask I have the server key!)

In order to dissect this trace I first have to decrypt it. So my approach was
to have Wireshark decode packets to/from port 7275 as "SSL." I therefore loaded
the trace, opened "Analyze > Decode As...", clicked "+", and entered the
following: Selected "TCP Port" and "7275." The default for the protocol was
displayed as "ULP" (which is the unencrypted form I want to later see after
decrypting the encrypted stream), I entered for current "SSL." I then clicked
"Ok." No warning or error msg was received.

The display in WireShark didn't change.

I went back to "Analyze > Decode As..." and noticed that my settings were gone.


You are receiving this mail because:
  • You are watching all bug changes.