Forum Discussion
Kevin_Stewart
May 13, 2013Employee
You can filter on anything you want, similar to tcpdump, but ssldump does not have a switch for writing to a file. You can save a capture with tcpdump and then read it (to decrypt) with ssldump. If you can narrow the filter down to a specific IP or set of IPs, your capture shouldn't be that big, so copying it from the command shell would probably be easier.