Forum Discussion
decrypted tcpdump capture without using an iRule using tshark
Hi Folks , I have used this Article : https://my.f5.com/manage/s/article/K31793632 Everything works well , and I could decrypt my captures but with using the manual way of collecting the Key l...
i resorted to automating the whole thing: https://github.com/f5-rahm/pcap_utils/blob/main/TLSv1_3_captures.py
CA_Valli
MVP
MVPIf you need an on/off trigger for decrypted traffic, I still prefer using the iRule way instead of changing DB keys, so it just logs SSL info for the specific aplication traffic I'm troubleshooting and I can turn it off when I'm done.
thanks CA_Valli ,
yes I prefer Decryption irule too.
but I aimed to find a replacement and I found the DB method but it needs some facilities to obtain the PMS Key.
- JRahm
Admin
i resorted to automating the whole thing: https://github.com/f5-rahm/pcap_utils/blob/main/TLSv1_3_captures.py
Thanks alot JRahm