Hello,
I am using Wireshark to decrypt a simple SSL exchange, and it appears that the 'Follow SSL stream' dialog is empty even if each packet is decrypted correctly. Looking at expert info shows :
Expert Info (Error/Malformed): Malformed Packet (Exception occurred)
There is no indication of failure in SSL debug file, decryption is done
correctly.
I've reproduced this problem with Wireshark 1.6.2 on Ubuntu Oneiric 32 bit (gnutls 2.10.5, gcrypt 1.5.0) and Wireshark 1.6.7 on Ubuntu Precise 64 bit (GnuTLS 2.12.14, with Gcrypt 1.5.0).
Windows versions do not show the problem and display the decrypted SSL stream (no error in expert info).
Here is attached a sample capture file with test key if someone wants to reproduce the problem.
Thank you for your help. Jerome
ssl_pb.pcap
Description: application/vnd.tcpdump.pcap
test.key
Description: application/pgp-keys
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
