Wireshark mailing list archives

Re: Malformed Packet (Exception occurred) during SSL decoding, Follow SSL stream empty


From: Jerome M <jahrome11 () gmail com>
Date: Fri, 25 May 2012 11:59:56 +0200

Hello again,

I think it's a mistake of mine when entering the private key, I put "ssl" in the protocol field but when entering "data" instead, everything works fine.

Best regards,

Jerome

-------- Original Message --------
Subject: Malformed Packet (Exception occurred) during SSL decoding, Follow SSL stream empty
Date:   Fri, 25 May 2012 11:16:08 +0200
From:   Jerome M <jahrome11 () gmail com>
To:     wireshark-dev () wireshark org



Hello,


I am using Wireshark to decrypt a simple SSL exchange, and it appears
that the 'Follow SSL stream' dialog is empty even if each packet is
decrypted correctly. Looking at expert info shows :
        Expert Info (Error/Malformed): Malformed Packet (Exception occurred)

There is no indication of failure in SSL debug file, decryption is done
correctly.

I've reproduced this problem with Wireshark 1.6.2 on Ubuntu Oneiric 32
bit (gnutls 2.10.5, gcrypt 1.5.0) and Wireshark 1.6.7 on Ubuntu Precise
64 bit (GnuTLS 2.12.14, with Gcrypt 1.5.0).

Windows versions do not show the problem and display the decrypted SSL
stream (no error in expert info).

Here is attached a sample capture file with test key if someone wants to
reproduce the problem.


Thank you for your help.


Jerome


___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: