Re: [tcpdump-workers] tcpdump-workers Digest, Vol 72, Issue 3

2018-07-08 Thread Michael Richardson
Steve Bourland wrote: > If you have the server's certificate, wireshark has the capability to I think you mean the server's private key. > decrypt SSL traffic captured with tcpdump, but you must have the > certificate and the start of the tcp session. TLS 1.3 will break that as it

Re: [tcpdump-workers] tcpdump-workers Digest, Vol 72, Issue 3

2018-07-08 Thread Steve Bourland
If you have the server's certificate, wireshark has the capability to decrypt SSL traffic captured with tcpdump, but you must have the certificate and the start of the tcp session. On Sun, 8 Jul 2018, tcpdump-workers-requ...@lists.tcpdump.org wrote: Send tcpdump-workers mailing list