3
I have a packet encrypted with TLS in a .pcap file. I also have the private key in a .priv file. How can I decrypt the .pcap file using Wireshark? I tried going to edit -> preferences -> protocols -> ssl -> edit -> new, but i am not sure what to enter in for the ip address, port? How can I display the corresponding packet in Wireshark to find out the port and ip address? Is this the right way to decrypt the .pcap file in Wireshark using private key? Pls help! Thanks!
I've always done this with a command line tool named ssldump: http://ssldump.sourceforge.net/
– Erwan Legrand – 2017-02-07T11:39:06.360