michael2009
michael2009
I have one idea , add fuction for support tls ip:port define . Then sngrep will recod ssl connect use tls handshake or ip:port static recod
If add one function for ip+port , then no need cap tls handshake aways , force decrypt tls . then solve issue for tls online callflow or offline import pcap....
set capture.tlsserver 192.168.1.1:5061 sngrep -I tls.pcap -k ca.key Don'nt show callflow [tls.zip](https://github.com/irontec/sngrep/files/1450393/tls.zip)
Then can export include tls handshake packet? Then best add one option to force deceypt use default cipher exam: set capture.tlsserver 192.168.1.1:5061 set capture.tlsserver_cipher_default=AES256-SHA
maybe other issue with view form . show too many lines 'class XXXX (fq_codel)' with one ethX . more 50 lines .
Yes , use version 3.8 and 3.9. Once start traffic test then both easy crashed .
Have any way to disable list qdisc and class ?
how to enable 'enable detailed statistics' and 'enable additional information' with run default ?
test new , same crashed bmon -o ascii > /dev/null , same crashed