Wireshark · Wireshark-dev: Re: [Wireshark-dev] Embed SSL keylog file in pcap-ng

[Ben Higgins <ben@xxxxxxxxxxxx>]

On Friday, May 18, 2018, Guy Harris <guy@xxxxxxxxxxxx> wrote:
> On May 18, 2018, at 6:08 PM, Ben Higgins <ben@xxxxxxxxxxxx> wrote:
>
> > Sounds like it'd still be fine for there to be multiple keylog blocks,
>
> Yes.
>
> > but, as you say, they must occur before any packets that require the secrets contained therein. Is that correct?
>
> Yes.

Great, thanks. I plan to have us implement this feature accordingly. Should we file a new ticket along these lines or will the existing ticket suffice?

> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    https://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
>              mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe