diff options
author | Peter Wu <peter@lekensteyn.nl> | 2017-06-11 21:26:48 +0200 |
---|---|---|
committer | Anders Broman <a.broman58@gmail.com> | 2017-06-12 06:03:42 +0000 |
commit | e815bbb2e6946e210cd15b1d9c2d280332352c4e (patch) | |
tree | 679be2f8e67a59025c79f4e9d80220b75f3b1c98 /epan/dissectors/packet-netlink.c | |
parent | ac2060563430d333589e4312a631d1d47cd6faa3 (diff) |
ssl: add heuristics to detect SSL/TLS on non-standard TCP port
TLS is quite easy to identify. When you see prefix "17 03 01"
(Application Data, TLS 1.0) or "15 03 01" (Handshake, TLS 1.0), it is
likely TLS. Rather than requiring manual Decode As, add a heuristic.
Note that the Application Data protocol might still require a manual
Decode As if the ALPN extension is missing or if the protocol (like
HTTP) is not registered as SSL/TLS heuristics dissector.
Change-Id: I2eac2aded821d3fd100bc5627850b936fadb63f7
Ping-Bug: 13743
Reviewed-on: https://code.wireshark.org/review/22083
Reviewed-by: Michael Mann <mmann78@netscape.net>
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
Diffstat (limited to 'epan/dissectors/packet-netlink.c')
0 files changed, 0 insertions, 0 deletions