Le 27/04/2011 11:47, Yohann Lepage a écrit :
> Oui :
> - http://wiki.wireshark.org/SSL
> - http://htluo.blogspot.com/2009/01/decrypt-https-traffic-with-wireshark.html
> - http://blogs.sun.com/beuchelt/entry/decrypting_ssl_traffic_with_wireshark


J'essaye actuellement cete piste, pour l'instant ca n'arrive pas à
décoder correctement le SSL. Alors que la clé privée est bien chargée.

Je regarde un peu plus en détail ; mais je ne comprends pas le "no
decoder available" alors que j'ai bien indiqué dans les prefs SSL sur
port 443 avec cette IP => http

FYI le debug log du decodage SSL :

ssl_init keys string:
188.165.227.167,443,http,/home/valentin/Bureau/private.key
ssl_init found host entry
188.165.227.167,443,http,/home/valentin/Bureau/private.key
ssl_init addr '188.165.227.167' port '443' filename
'/home/valentin/Bureau/private.key' password(only for p12 file) '(null)'
Private key imported: KeyID
c1:d1:24:7e:61:14:2c:7e:ee:de:01:1f:81:e6:49:09:...
ssl_init private key file /home/valentin/Bureau/private.key successfully
loaded
association_add TCP port 443 protocol http handle 0x7fdfd8e72c50

dissect_ssl enter frame #15 (first time)
ssl_session_init: initializing ptr 0x7fdfba3e0028 size 672
  conversation = 0x7fdfba3de8b8, ssl_session = 0x7fdfba3e0028
  record: offset = 0, reported_length_remaining = 419
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 414, ssl state 0x00
association_find: TCP port 46731 found (nil)
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 1 offset 5 length 410 bytes,
remaining 419
packet_from_server: is from server - FALSE
ssl_find_private_key server 188.165.227.167:443
dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01

dissect_ssl enter frame #17 (first time)
  conversation = 0x7fdfba3de8b8, ssl_session = 0x7fdfba3e0028
  record: offset = 0, reported_length_remaining = 1448
dissect_ssl3_record found version 0x0301 -> state 0x11
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 81, ssl state 0x11
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 2 offset 5 length 77 bytes,
remaining 86
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13
dissect_ssl3_hnd_srv_hello can't find cipher suite 0x39
  record: offset = 86, reported_length_remaining = 1362
  need_desegmentation: offset = 86, reported_length_remaining = 1362

dissect_ssl enter frame #18 (first time)
  conversation = 0x7fdfba3de8b8, ssl_session = 0x7fdfba3e0028
  record: offset = 0, reported_length_remaining = 2759
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 2343, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 11 offset 5 length 2339 bytes,
remaining 2348
  record: offset = 2348, reported_length_remaining = 411
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 397, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 12 offset 2353 length 393 bytes,
remaining 2750
  record: offset = 2750, reported_length_remaining = 9
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 4, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 14 offset 2755 length 0 bytes,
remaining 2759

dissect_ssl enter frame #20 (first time)
ssl_session_init: initializing ptr 0x7fdfba3e0790 size 672
  conversation = 0x7fdfba3dec50, ssl_session = 0x7fdfba3e0790
  record: offset = 0, reported_length_remaining = 419
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 414, ssl state 0x00
association_find: TCP port 46732 found (nil)
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 1 offset 5 length 410 bytes,
remaining 419
packet_from_server: is from server - FALSE
ssl_find_private_key server 188.165.227.167:443
dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01

dissect_ssl enter frame #22 (first time)
  conversation = 0x7fdfba3dec50, ssl_session = 0x7fdfba3e0790
  record: offset = 0, reported_length_remaining = 1448
dissect_ssl3_record found version 0x0301 -> state 0x11
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 81, ssl state 0x11
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 2 offset 5 length 77 bytes,
remaining 86
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13
dissect_ssl3_hnd_srv_hello can't find cipher suite 0x39
  record: offset = 86, reported_length_remaining = 1362
  need_desegmentation: offset = 86, reported_length_remaining = 1362

dissect_ssl enter frame #23 (first time)
  conversation = 0x7fdfba3dec50, ssl_session = 0x7fdfba3e0790
  record: offset = 0, reported_length_remaining = 2759
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 2343, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 11 offset 5 length 2339 bytes,
remaining 2348
  record: offset = 2348, reported_length_remaining = 411
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 397, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 12 offset 2353 length 393 bytes,
remaining 2750
  record: offset = 2750, reported_length_remaining = 9
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 4, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 14 offset 2755 length 0 bytes,
remaining 2759

dissect_ssl enter frame #24 (first time)
ssl_session_init: initializing ptr 0x7fdfba3e0e18 size 672
  conversation = 0x7fdfba3defe8, ssl_session = 0x7fdfba3e0e18
  record: offset = 0, reported_length_remaining = 419
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 414, ssl state 0x00
association_find: TCP port 46733 found (nil)
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 1 offset 5 length 410 bytes,
remaining 419
packet_from_server: is from server - FALSE
ssl_find_private_key server 188.165.227.167:443
dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01

dissect_ssl enter frame #28 (first time)
  conversation = 0x7fdfba3defe8, ssl_session = 0x7fdfba3e0e18
  record: offset = 0, reported_length_remaining = 1448
dissect_ssl3_record found version 0x0301 -> state 0x11
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 81, ssl state 0x11
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 2 offset 5 length 77 bytes,
remaining 86
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13
dissect_ssl3_hnd_srv_hello can't find cipher suite 0x39
  record: offset = 86, reported_length_remaining = 1362
  need_desegmentation: offset = 86, reported_length_remaining = 1362

dissect_ssl enter frame #29 (first time)
  conversation = 0x7fdfba3defe8, ssl_session = 0x7fdfba3e0e18
  record: offset = 0, reported_length_remaining = 2759
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 2343, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 11 offset 5 length 2339 bytes,
remaining 2348
  record: offset = 2348, reported_length_remaining = 411
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 397, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 12 offset 2353 length 393 bytes,
remaining 2750
  record: offset = 2750, reported_length_remaining = 9
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 4, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 14 offset 2755 length 0 bytes,
remaining 2759

dissect_ssl enter frame #30 (first time)
ssl_session_init: initializing ptr 0x7fdfba3e1660 size 672
  conversation = 0x7fdfba3df718, ssl_session = 0x7fdfba3e1660
  record: offset = 0, reported_length_remaining = 419
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 414, ssl state 0x00
association_find: TCP port 46735 found (nil)
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 1 offset 5 length 410 bytes,
remaining 419
packet_from_server: is from server - FALSE
ssl_find_private_key server 188.165.227.167:443
dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01

dissect_ssl enter frame #32 (first time)
  conversation = 0x7fdfba3df718, ssl_session = 0x7fdfba3e1660
  record: offset = 0, reported_length_remaining = 1448
dissect_ssl3_record found version 0x0301 -> state 0x11
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 81, ssl state 0x11
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 2 offset 5 length 77 bytes,
remaining 86
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13
dissect_ssl3_hnd_srv_hello can't find cipher suite 0x39
  record: offset = 86, reported_length_remaining = 1362
  need_desegmentation: offset = 86, reported_length_remaining = 1362

dissect_ssl enter frame #33 (first time)
  conversation = 0x7fdfba3df718, ssl_session = 0x7fdfba3e1660
  record: offset = 0, reported_length_remaining = 2759
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 2343, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 11 offset 5 length 2339 bytes,
remaining 2348
  record: offset = 2348, reported_length_remaining = 411
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 397, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 12 offset 2353 length 393 bytes,
remaining 2750
  record: offset = 2750, reported_length_remaining = 9
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 4, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 14 offset 2755 length 0 bytes,
remaining 2759

dissect_ssl enter frame #35 (first time)
ssl_session_init: initializing ptr 0x7fdfba3e1dc8 size 672
  conversation = 0x7fdfba3df380, ssl_session = 0x7fdfba3e1dc8
  record: offset = 0, reported_length_remaining = 419
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 414, ssl state 0x00
association_find: TCP port 46734 found (nil)
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 1 offset 5 length 410 bytes,
remaining 419
packet_from_server: is from server - FALSE
ssl_find_private_key server 188.165.227.167:443
dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01

dissect_ssl enter frame #37 (first time)
  conversation = 0x7fdfba3df380, ssl_session = 0x7fdfba3e1dc8
  record: offset = 0, reported_length_remaining = 1448
dissect_ssl3_record found version 0x0301 -> state 0x11
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 81, ssl state 0x11
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 2 offset 5 length 77 bytes,
remaining 86
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13
dissect_ssl3_hnd_srv_hello can't find cipher suite 0x39
  record: offset = 86, reported_length_remaining = 1362
  need_desegmentation: offset = 86, reported_length_remaining = 1362

dissect_ssl enter frame #38 (first time)
  conversation = 0x7fdfba3df380, ssl_session = 0x7fdfba3e1dc8
  record: offset = 0, reported_length_remaining = 2759
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 2343, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 11 offset 5 length 2339 bytes,
remaining 2348
  record: offset = 2348, reported_length_remaining = 411
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 397, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 12 offset 2353 length 393 bytes,
remaining 2750
  record: offset = 2750, reported_length_remaining = 9
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 4, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 14 offset 2755 length 0 bytes,
remaining 2759

dissect_ssl enter frame #39 (first time)
ssl_session_init: initializing ptr 0x7fdfba3e2450 size 672
  conversation = 0x7fdfba3dfab0, ssl_session = 0x7fdfba3e2450
  record: offset = 0, reported_length_remaining = 419
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 414, ssl state 0x00
association_find: TCP port 46736 found (nil)
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 1 offset 5 length 410 bytes,
remaining 419
packet_from_server: is from server - FALSE
ssl_find_private_key server 188.165.227.167:443
dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01

dissect_ssl enter frame #43 (first time)
  conversation = 0x7fdfba3dfab0, ssl_session = 0x7fdfba3e2450
  record: offset = 0, reported_length_remaining = 1448
dissect_ssl3_record found version 0x0301 -> state 0x11
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 81, ssl state 0x11
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 2 offset 5 length 77 bytes,
remaining 86
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13
dissect_ssl3_hnd_srv_hello can't find cipher suite 0x39
  record: offset = 86, reported_length_remaining = 1362
  need_desegmentation: offset = 86, reported_length_remaining = 1362

dissect_ssl enter frame #44 (first time)
  conversation = 0x7fdfba3dfab0, ssl_session = 0x7fdfba3e2450
  record: offset = 0, reported_length_remaining = 2759
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 2343, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 11 offset 5 length 2339 bytes,
remaining 2348
  record: offset = 2348, reported_length_remaining = 411
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 397, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 12 offset 2353 length 393 bytes,
remaining 2750
  record: offset = 2750, reported_length_remaining = 9
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 4, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 14 offset 2755 length 0 bytes,
remaining 2759

dissect_ssl enter frame #45 (first time)
  conversation = 0x7fdfba3de8b8, ssl_session = 0x7fdfba3e0028
  record: offset = 0, reported_length_remaining = 198
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 134, ssl state 0x13
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 16 offset 5 length 130 bytes,
remaining 139
ssl_decrypt_pre_master_secret key exchange 0 different from KEX_RSA (16)
dissect_ssl3_handshake can't decrypt pre master secret
  record: offset = 139, reported_length_remaining = 59
dissect_ssl3_record: content_type 20
dissect_ssl3_change_cipher_spec
packet_from_server: is from server - FALSE
ssl_change_cipher CLIENT
  record: offset = 145, reported_length_remaining = 53
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 48, ssl state 0x13
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 192 offset 150 length 13768779
bytes, remaining 198

dissect_ssl enter frame #48 (first time)
  conversation = 0x7fdfba3de8b8, ssl_session = 0x7fdfba3e0028
  record: offset = 0, reported_length_remaining = 59
dissect_ssl3_record: content_type 20
dissect_ssl3_change_cipher_spec
packet_from_server: is from server - TRUE
ssl_change_cipher SERVER
  record: offset = 6, reported_length_remaining = 53
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 48, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 23 offset 11 length 12542631
bytes, remaining 59

dissect_ssl enter frame #49 (first time)
  conversation = 0x7fdfba3dec50, ssl_session = 0x7fdfba3e0790
  record: offset = 0, reported_length_remaining = 198
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 134, ssl state 0x13
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 16 offset 5 length 130 bytes,
remaining 139
ssl_decrypt_pre_master_secret key exchange 0 different from KEX_RSA (16)
dissect_ssl3_handshake can't decrypt pre master secret
  record: offset = 139, reported_length_remaining = 59
dissect_ssl3_record: content_type 20
dissect_ssl3_change_cipher_spec
packet_from_server: is from server - FALSE
ssl_change_cipher CLIENT
  record: offset = 145, reported_length_remaining = 53
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 48, ssl state 0x13
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 119 offset 150 length 8074366
bytes, remaining 198

dissect_ssl enter frame #52 (first time)
  conversation = 0x7fdfba3dec50, ssl_session = 0x7fdfba3e0790
  record: offset = 0, reported_length_remaining = 59
dissect_ssl3_record: content_type 20
dissect_ssl3_change_cipher_spec
packet_from_server: is from server - TRUE
ssl_change_cipher SERVER
  record: offset = 6, reported_length_remaining = 53
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 48, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 209 offset 11 length 14662272
bytes, remaining 59

dissect_ssl enter frame #54 (first time)
  conversation = 0x7fdfba3defe8, ssl_session = 0x7fdfba3e0e18
  record: offset = 0, reported_length_remaining = 198
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 134, ssl state 0x13
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 16 offset 5 length 130 bytes,
remaining 139
ssl_decrypt_pre_master_secret key exchange 0 different from KEX_RSA (16)
dissect_ssl3_handshake can't decrypt pre master secret
  record: offset = 139, reported_length_remaining = 59
dissect_ssl3_record: content_type 20
dissect_ssl3_change_cipher_spec
packet_from_server: is from server - FALSE
ssl_change_cipher CLIENT
  record: offset = 145, reported_length_remaining = 53
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 48, ssl state 0x13
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 93 offset 150 length 5956532
bytes, remaining 198

dissect_ssl enter frame #56 (first time)
  conversation = 0x7fdfba3defe8, ssl_session = 0x7fdfba3e0e18
  record: offset = 0, reported_length_remaining = 59
dissect_ssl3_record: content_type 20
dissect_ssl3_change_cipher_spec
packet_from_server: is from server - TRUE
ssl_change_cipher SERVER
  record: offset = 6, reported_length_remaining = 53
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 48, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 237 offset 11 length 3291872
bytes, remaining 59

dissect_ssl enter frame #57 (first time)
  conversation = 0x7fdfba3df718, ssl_session = 0x7fdfba3e1660
  record: offset = 0, reported_length_remaining = 198
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 134, ssl state 0x13
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 16 offset 5 length 130 bytes,
remaining 139
ssl_decrypt_pre_master_secret key exchange 0 different from KEX_RSA (16)
dissect_ssl3_handshake can't decrypt pre master secret
  record: offset = 139, reported_length_remaining = 59
dissect_ssl3_record: content_type 20
dissect_ssl3_change_cipher_spec
packet_from_server: is from server - FALSE
ssl_change_cipher CLIENT
  record: offset = 145, reported_length_remaining = 53
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 48, ssl state 0x13
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 71 offset 150 length 13889844
bytes, remaining 198

dissect_ssl enter frame #60 (first time)
  conversation = 0x7fdfba3df718, ssl_session = 0x7fdfba3e1660
  record: offset = 0, reported_length_remaining = 59
dissect_ssl3_record: content_type 20
dissect_ssl3_change_cipher_spec
packet_from_server: is from server - TRUE
ssl_change_cipher SERVER
  record: offset = 6, reported_length_remaining = 53
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 48, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 9 offset 11 length 2854628
bytes, remaining 59

dissect_ssl enter frame #61 (first time)
  conversation = 0x7fdfba3df380, ssl_session = 0x7fdfba3e1dc8
  record: offset = 0, reported_length_remaining = 198
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 134, ssl state 0x13
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 16 offset 5 length 130 bytes,
remaining 139
ssl_decrypt_pre_master_secret key exchange 0 different from KEX_RSA (16)
dissect_ssl3_handshake can't decrypt pre master secret
  record: offset = 139, reported_length_remaining = 59
dissect_ssl3_record: content_type 20
dissect_ssl3_change_cipher_spec
packet_from_server: is from server - FALSE
ssl_change_cipher CLIENT
  record: offset = 145, reported_length_remaining = 53
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 48, ssl state 0x13
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 163 offset 150 length 10485016
bytes, remaining 198

dissect_ssl enter frame #62 (first time)
  conversation = 0x7fdfba3df380, ssl_session = 0x7fdfba3e1dc8
  record: offset = 0, reported_length_remaining = 59
dissect_ssl3_record: content_type 20
dissect_ssl3_change_cipher_spec
packet_from_server: is from server - TRUE
ssl_change_cipher SERVER
  record: offset = 6, reported_length_remaining = 53
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 48, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 175 offset 11 length 3210904
bytes, remaining 59

dissect_ssl enter frame #65 (first time)
  conversation = 0x7fdfba3dfab0, ssl_session = 0x7fdfba3e2450
  record: offset = 0, reported_length_remaining = 198
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 134, ssl state 0x13
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 16 offset 5 length 130 bytes,
remaining 139
ssl_decrypt_pre_master_secret key exchange 0 different from KEX_RSA (16)
dissect_ssl3_handshake can't decrypt pre master secret
  record: offset = 139, reported_length_remaining = 59
dissect_ssl3_record: content_type 20
dissect_ssl3_change_cipher_spec
packet_from_server: is from server - FALSE
ssl_change_cipher CLIENT
  record: offset = 145, reported_length_remaining = 53
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 48, ssl state 0x13
packet_from_server: is from server - FALSE
decrypt_ssl3_record: using client decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 124 offset 150 length 9835581
bytes, remaining 198

dissect_ssl enter frame #66 (first time)
  conversation = 0x7fdfba3dfab0, ssl_session = 0x7fdfba3e2450
  record: offset = 0, reported_length_remaining = 59
dissect_ssl3_record: content_type 20
dissect_ssl3_change_cipher_spec
packet_from_server: is from server - TRUE
ssl_change_cipher SERVER
  record: offset = 6, reported_length_remaining = 53
dissect_ssl3_record: content_type 22
decrypt_ssl3_record: app_data len 48, ssl state 0x13
packet_from_server: is from server - TRUE
decrypt_ssl3_record: using server decoder
decrypt_ssl3_record: no decoder available
dissect_ssl3_handshake iteration 1 type 107 offset 11 length 4787313
bytes, remaining 59

...
_______________________________________________
Liste de diffusion du FRsAG
http://www.frsag.org/

Répondre à