Editcap not found on mac osx
I am trying to use editcap on my mac, but the command is not found. How do I add this?
1 Answer
- Sort by
oldest newest most voted
0
If you've installed Wireshark 3.2, make sure you installed the "Add Wireshark to the system path" package.
Then you'll need to open a new Terminal window - that won't affect existing windows.
Comments
I have Wireshark 3.2.5 on my mac. Where do I find that package?
In the .dmg that you downloaded to install Wireshark 3.2.5. You may have to download it again; you won't need to drag-install Wireshark again, but you will need to double-click the "Add Wireshark to the system path" package to install it.
Oh I see. Thanks a lot. I am using the sample capture file from Wireshark, found here: https://wiki.wireshark.org/DTLS. The key log file provided (snakeoil-rsa.key) is an unsupported private key file, and the decryption will not work. Do I change this to a nss format? And if so, how would I do that?
Are you looking specifically for DTLS test files or would regular TLS be ok?
I am looking only to embed the keys into the pcap file (specifically this DTLS test file) to create one single pcapng file. Right now, the capture and the key come separately.
Your Answer
Please start posting anonymously - your entry will be published after you log in or create a new account.
This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.
Comments