3 ms·
I’m guessing it doesn’t work with TLS as it’d need the keys to decrypt the traffic
by youngtaff 4y ago
I’m guessing it doesn’t work with TLS as it’d need the keys to decrypt the traffic
- LinuxBender 4y agoI recall seeing a thread somewhere saying tcpflow would not add this capability and they point people to ssldump [1][2] and even that has some limitations. [1] - https://github.com/adulau/ssldump https://github.com/adulau/ssldump [2] - https://linux.die.net/man/1/ssldump https://linux.die.net/man/1/ssldump
- fmajid 4y agoWith TLS 1.3 and Perfect Forward Safety, even knowing the secret key is no longer enough. Otherwise, ssldump is a tool that would dump sessions if you knew the server private key and were somehow able to force negotiating a non-PFS TLS 1.2 cipher suite.