Seems like what I am missing is exporting the keys. Nevertheless it mentions that exporting isn't supported with the C# platforms, so I guess I can't get what I was expecting. Thanks for your reply and helping.
On Thursday, May 20, 2021 at 8:17:11 AM UTC+3 [email protected] wrote: > Hi, > > Can you confirm that TLS was decrypted? Did you see packets like this > > [image: image.png] > > i.e. TLS1.2 packets with ClientHello and cert/key exchange? Also I am > assuming you exported the session keys as described in > https://gitlab.com/wireshark/wireshark/-/wikis/How-to-Export-TLS-Master-keys-of-gRPC > > . > > After ensuring TLS payload was decrypted by Wireshark you can decode the > payload as http2 and after that is verified you can use the .proto files to > decode the protobuf payload. > > > On Tue, May 18, 2021 at 11:22 AM Ohad <[email protected]> wrote: > >> I am trying to dissect TCP packets carrying gRPC payloads with Wireshark. >> Although I configured decoding as http2 and provided path to my .proto >> directory, Wireshark seem to only decrypt TLS data, and doesn't show the >> actual content. >> >> I am using a gRPC client and server in localhost and chose the loopback >> interface. Also, I followed guidelines in grpc.io site: >> https://grpc.io/blog/wireshark/ >> >> [image: Screenshot 2021-05-18 193309.png] >> >> <https://i.stack.imgur.com/vXQsu.png> >> >> Will appreciate assistance on how to properly dissect the packets and >> show as expected from the guide (the guide is just a reference for what I >> am trying to achieve here) >> >> -- >> You received this message because you are subscribed to the Google Groups >> "grpc.io" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/grpc-io/1455ea5c-bf78-440d-bcdc-26f17e0fd32an%40googlegroups.com >> >> <https://groups.google.com/d/msgid/grpc-io/1455ea5c-bf78-440d-bcdc-26f17e0fd32an%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> > -- You received this message because you are subscribed to the Google Groups "grpc.io" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/grpc-io/725bf471-e6b2-4e6f-a31c-e0c886ffbefen%40googlegroups.com.
