[SOLVED] compile wireshark

NM04 · 03-27-2015, 02:09 AM

hi all,
I have wireshark installed, and now I want it to decrypt ssl & TLS conversations for me. I read on internet that I have to compile it with ssl support. How can I do it?

veerain · 03-27-2015, 11:51 AM

1) Install openssl devel packages. Plus other required packages.

2) download wireshark sources

3) Unpack it and cd to wireshark directory

Execute:

Code:

./configure --prefix=/somedir --with-ssl
make
make install

Replace /somedir with a custom directory where this package files would get installed.

knudfl · 03-27-2015, 04:49 PM

* wireshark may already be compiled with ssl.

See Fedora, example wireshark-1.12.1-1.fc21.src.rpm .
* wireshark.spec, line 217 : --with-ssl

-

NM04 · 03-28-2015, 02:45 AM

yes you are right it is already compiled with ssl I found it.

Thanks & regards,

NM04 · 03-28-2015, 02:47 AM

I have another query. Actually I am trying to decrypt a pcap file and I dont have keys to decrypt. I have full tcp & tls handshake in the pcap file any idea how it can be done ?

regards,