Re: Embed SSL keylog file in pcap-ng

[Ben Higgins <ben () extrahop com>]

On Friday, May 18, 2018, Guy Harris <guy () alum mit edu> wrote:

> On May 18, 2018, at 6:08 PM, Ben Higgins <ben () extrahop com> wrote:
>
> > Sounds like it'd still be fine for there to be multiple keylog blocks,
>
> Yes.
>
> > but, as you say, they must occur before any packets that require the
> secrets contained therein. Is that correct?
>
> Yes.


Great, thanks. I plan to have us implement this feature accordingly. Should
we file a new ticket along these lines or will the existing ticket suffice?

___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
> Archives:    https://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
>              mailto:wireshark-dev-request () wireshark org
> ?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe