First time here? Check out the FAQ!
Sorry, this content is no longer available
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Does Wireshark store credentials, allow printed titles

I'm working on filling out a STIG security checklist for Wireshark and WinPCap and I have 2 questions.

  1. Does either piece of software store unencrypted passwords locally (such as for remote captures)?
  2. Are there any hidden options to allow a header/footer or title to be added to printed material from either one?

I assume no for #2, but #1 was one I couldn't say for sure given my investigations on the web so far.

Thanks for your help,

Bob

RBak's avatar
1
RBak
asked 2018-10-11 16:15:48 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

  1. I would say yes, e.g., there are UATs (User Access Tables) where key material is stored in order to decrypt data streams; Wireshark can use SSL key dump files to use in decryption; remote capture setup information may contain key information.

  2. There are no (hidden or otherwise) options to add header/footer (e.g., classification) to printed material.

PS: Do not forget to include NPcap into your evaluation, the capture engine slated as the replacement for WinPcap.

Jaap's avatar
13.7k
Jaap
answered 2018-10-11 16:39:25 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer