Re: [Wireshark-users] mix pcap files

2008-02-26 Thread vishal arya
doing this this requires admin access on network device. in brief : * lets say a switch a 10 ports and you can configure lets say port 7 to get copy of data passing through other ports by configuring port mirroring to port 7. * connect a second nic/ethernet card on a machine and connect

[Wireshark-users] Does wireshark decode TLS_DHE_RSA_WITH_AES_256_CBC_SHA using server key

2008-02-21 Thread vishal arya
Did everything by the book ,still tshark/wireshark fail to show may contents on the payload data. then i did some gooleing to find intresting stuff about ephemeral keys cannot be decrypted. please let me know if TLS_DHE_RSA_WITH_AES_256_CBC_SHA ( AES 256 bit Encryption ) can be decrypted using

[Wireshark-users] how to convert ssl pcap to decrypted pcap file that can be used with tcpflow

2008-02-05 Thread Vishal Arya
: 842F81CCD99765C1AC2AC1B6CE9250D339BC7454C8A623FC... -end-- please help!!! -Vishal Arya www.vishalarya.in ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org

[Wireshark-users] saving decrypted ssl capture file

2008-02-05 Thread Vishal Arya
is there a way to open a capture file with encrypted ssl data and use the http server's rsa key to decrypt it and save is as a new decrypted capture file. i tried the below command but did not work $~/work/wireshark-0.99.7/tshark -V -r /tmp/rsasnakeoil2.cap -o