Re: [Wireshark-users] RE : Find Wireshark folder on Windows

2008-04-03 Thread Robert D. Scott
There is a separate folder for plugins for each version. The version number is the name of the folder. Robert D. Scott [EMAIL PROTECTED] Senior Network Engineer 352-273-0113 Phone CNS – Network Services 352-392-2061 CNS Receptionist University of Florida

Re: [Wireshark-users] Find Wireshark folder on Windows

2008-04-03 Thread Robert D. Scott
Registry Entry: My Computer/HKEY_CLASSES_ROOT/Applications/wireshark.exe/shell/open/command In my case: REG_SZ "C:\Program Files\Wireshark\wireshark.exe" "%1" Robert D. Scott [EMAIL PROTECTED] Senior Network Engineer 352-273-0113 Phone CNS – Network S

Re: [Wireshark-users] Newcomer question

2008-03-24 Thread Robert D. Scott
127.0.0.1,443,http,c:\path\to\snakeoil2.key from http://wiki.wireshark.org/SSL?highlight=%28SSL%29 You are missing a parameter Robert From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goss, Chad Sent: Monday, March 24, 2008 3:39 PM To: wireshark

Re: [Wireshark-users] No decoder

2008-03-13 Thread Robert D. Scott
It means that the packet in question does not match the decrption key you have defined. The whole debug from the packets in question would help. Robert _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc Quibell Sent: Thursday, March 13, 2008 4:25 PM To: Wireshark

Re: [Wireshark-users] Wireshark only capturing TCP handshake

2008-03-04 Thread Robert D. Scott
Is the server multi-homed? Robert -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Temples Sent: Tuesday, March 04, 2008 4:27 PM To: Community support list for Wireshark Subject: Re: [Wireshark-users] Wireshark only capturing TCP handshake The fire

Re: [Wireshark-users] tShark SSL Decryption Issue

2008-03-03 Thread Robert D. Scott
A little more info on the server: Is there only 1 Web listener on a single IP and all the sights use URI information to direct http requests to the correct web? The two packets you included from your debug file 1 & 18 are "packet_from_server: is from server - FALSE". These did not come from the IP

Re: [Wireshark-users] SSL Decryption on the Fly

2008-02-29 Thread Robert D. Scott
do diagnostic sniffing, I am not sure I want the passwords used on my production SSL modules floating around. :) Robert D. Scott [EMAIL PROTECTED] Senior Network Engineer 352-273-0113 Phone CNS - Network Services 352-392-2061 CNS Receptionist University of Florida

[Wireshark-users] SSL Decryption on the Fly

2008-02-29 Thread Robert D. Scott
Cisco SSL offload module. ????? Robert D. Scott [EMAIL PROTECTED] Senior Network Engineer 352-273-0113 Phone CNS - Network Services 352-392-2061 CNS Receptionist University of Florida 352-392-9440 FAX Florida Lambda Rail 352-294-3571 FLR NOC Gaine