On Fri, 26 Jan 2001 [EMAIL PROTECTED] wrote:

> 
> >Can Tcpdump decode SSL traffic (and if given the proper key, the data too)?  
> >
> >I understand that using SSLeay or OpenSSL with the -E option can decode secure 
>IPsec.  Can these libraries be used for decoding SSL also?
> >
> >I guess ssldump implements this functionality.  Is there any plan for integrating 
>ssldump's decoding into tcpdump?
> 
>       I don't think so.  we can dump IPsec traffic only if we have the
>       IPsec secret key.  for SSL, they exchange session keys on the fly
>       so you have no idea what session key is.
We can decode the headers, though.
Not the payload.

Sebastian

---
"Please stop the earth. Let me off."
 

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe

Reply via email to