Wireshark · Wireshark-users: Re: [Wireshark-users] TLS

["David Moncur" <David.Moncur@xxxxxxxxxxxx>]

Guy,

Thanks - Version 1.1.2-SVN-26371 (SVN Rev 26371) looks promising !

Cheers,

David

-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Guy Harris
Sent: 07 October 2008 18:18
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] TLS


On Oct 7, 2008, at 9:01 AM, David Moncur wrote:

> I am using Wireshark 1.0.3 on Windows XP.
>
> Having captures an SMTP session using TLS,

Is that a session that starts out as regular SMTP and then switches to  
TLS with a STARTTLS command?

If so...

> I was expecting to have Wireshark decode it for me. However it  
> decoded it no further than SMTP, and TLS is not even in the protocol  
> list.

..there's no support for that in the 1.0[.x] releases.  I checked  
code to support STARTTLS into the main branch, but that was fairly  
recently, after the 1.0[.x] releases were branched off.

> How do I get more information from my tcpdump capture ?

The 1.1.0 development build might have STARTTLS support (I don't  
remember whether it was built before or after I added it):

	http://www.wireshark.org/download/win32/

If not, you'll need one of the automated builds:

	http://www.wireshark.org/download/automated/win32/
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-users


David Moncur 
Senior Operations Engineer
Wirefast Limited
DDI: +44 (0)20 7592 1270
Fax: +44 (0)20 7630 9864
 
Wirefast provides secure corporate messaging services.
See our messaging solutions at http://www.wirefast.com/
Please consider the environment.
Does this email or attachment need to be printed? 
This message contains confidential information and is intended only 
for the individual named. If you are not the named addressee you 
should not disseminate, distribute or copy this email. Please 
notify the sender immediately by email if you have received this 
email by mistake and delete this email from your system.

Email transmission cannot be guaranteed to be secure or error-free 
as information could be intercepted, corrupted, lost, destroyed, 
arrive late or incomplete, or contain viruses. The sender therefore 
does not accept liability for any errors or omissions in the contents 
of this message which arise as a result of email transmission.
Wirefast Limited is registered in England & Wales
Company number: 03865860
Registered Office: 7/10 Chandos Street, Cavendish Square, London, W1G 9DQ