Translating Cipher Suites from Wireshark to BIG-IP
Many of us use Wireshark to capture and analyze network traffic. When it comes to SSL/TLS traffic, Wireshark does a great job of showing the cipher suites presented by the client and then the cipher ...
Updated Jun 06, 2023
Version 2.0ltwagnon
Ret. Employee
Joined May 15, 2019
JRahm
Oct 18, 2017Admin
What if we updated the wireshark source to preload the friendly (and useable) cipher name after the long name and hex in that image capture? So instead of this:
Cipher Suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039)
We could have this:
Cipher Suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039) (DHE-RSA-AES256-SHA)