Revision history [back]
How do I search decrypted TLS data in a capture.
I have created a capture with decrypted TLS data by injecting the keys into the capture file. I have not found a way to search the decrypted data using the display filter. I can search encrypted data using tls.app_data. It seems like it should be a simple thing to search decrypted data, but I have not found it. I have tried using tls.segment tls.segment.data, tls.segments, tls.reassembled.data and others. Thanks