Forum Discussion

MVP

Jun 23, 2023

Solved

decrypted tcpdump capture without using an iRule using tshark

Hi Folks , I have used this Article : https://my.f5.com/manage/s/article/K31793632 Everything works well , and I could decrypt my captures but with using the manual way of collecting the Key l...

application delivery

JRahm
Aug 17, 2023
i resorted to automating the whole thing: https://github.com/f5-rahm/pcap_utils/blob/main/TLSv1_3_captures.py

CA_Valli

MVP

If you need an on/off trigger for decrypted traffic, I still prefer using the iRule way instead of changing DB keys, so it just logs SSL info for the specific aplication traffic I'm troubleshooting and I can turn it off when I'm done.