Wireshark-bugs: [Wireshark-bugs] [Bug 12132] Client Hello not dissected when failed SSL handshak

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 18 Feb 2016 08:41:50 +0000

Comment # 5 on bug 12132 from 
(In reply to Peter Wu from comment #3)
> Minimum reproducer:
> 
>     editcap -r session.full_anon.pcap pkts.pap 4-5
>     tshark -r pkts.pap -2
> 
> I guess it is related to the HTTP heuristics dissector which finds HTTP and
> changes the conversation dissector. Frame 4 is TLS while frame 5 is HTTP.

The question is what the better? HTTP heuristics or SSL ? ;-)
I think if the HTTP heuristics is disable, we see the SSL handshake ?

You are receiving this mail because:
  • You are watching all bug changes.