Wireshark-dev: Re: [Wireshark-dev] Embed SSL keylog file in pcap-ng

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Ahmad Fatoum <ahmad@xxxxxx>
Date: Fri, 4 May 2018 19:07:49 +0200
> On 4May 2018, at 01:13, Ben Higgins <ben@xxxxxxxxxxxx> wrote:
> 
> What I'd like to do is instead create a new pcap-ng block type that we can put SSL keylog file contents into verbatim.

How about a generic "Wireshark dissector preferences" pcapng block with { pref.key => value } tuples?
e.g. { ssl.keys_list => "127.0.0.1,4443,http,/home/dirkx/xx/privkey.pem" }


And when the capture file is closed, overridden preferences are reset.

Cheers
Ahmad