Wireshark-users: Re: [Wireshark-users] Trying to decode sshv2 traffic

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Tue, 17 Jun 2014 13:16:04 -0400
On 06/17/14 12:59, Ahmed Zaki wrote:

Dear All,

I captured SSHV2 trace file between two servers, I want to see the
decrypted packets.

Any ideas about how I can decrypt the packets?

I believe it is possible to collect the public keys from both servers,
Is this going to help?
Unfortunately, no. The SSH dissector in Wireshark is not able to decrypt SSH packets. 

See:

http://wiki.wireshark.org/SSH