Skip to content
A very simple lib for writing pcapng files (section header, interface description, enhanced packet and decryption secrets blocks)
C++ C
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.

Files

Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
README.md
main.cpp
pcapng.cpp
pcapng.h

README.md

PcapNg is a new file format to store captured packets. The format has a lot of interesting/useful features. The one that I’m was interested in is Decryption Secrets block, which allows Wireshark and other tools to decrypt TLS traffic. i.e Specifying Key log file or RSA keys is not needed in this case.

Decryption Secrets block is effectively is a key log file embedded in a pcapng file.

Pcapng file format document can be download on https://github.com/pcapng/pcapng

To support the feature in my android application, I developed a simple lib for writing pcapng blocks, that has only 4 functions. An example of using the lib is included.

Additional details can be found on https://egorovandreyrm.com/pcapng-decryption-secrets-block/

You can’t perform that action at this time.