On Sat, Oct 8, 2022, 11:45 AM Bahjat, Ehab <ehab.bah...@spirent.com> wrote:
> Hi > > I have a trace of a ULP (OMA UserPlane Location Protocol) session. It is > encrypted in TLS, wireshark is able to decrypt the tls packets using > pre-master secret log file which I have but I am not able to decode the > decrypted data because I couldn’t find ULP in the protocol list for tls as > showing below, the only way was using a painful process to remove the > encrypted hex string and reassemble the packet again, is there away to > decode ULP using tls port number? Thanks ! > It is possible to decrypt it through the deprecated "RSA keys list" UAT preference by using the protocol name, but it doesn't appear in the Decode As list currently, as you note. It should (because that's the approved method for configuration going forward) and it wouldn't be that difficult to add. Would you mind filing an issue for it? https://gitlab.com/wireshark/wireshark/-/issues John Thacker
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe
