PolarProxy comes with a feature called PCAP-over-IP, which provides a real-time PCAP stream with decrypted packets to connecting clients. Users who wish to inspect the decrypted TLS traffic in Wireshark typically open this file from disk, but that doesn’t allow for a real-time view of the traffic. PolarProxy is a TLS proxy that decrypts and re-encrypts TLS traffic, while also saving the decrypted traffic in a PCAP file. This blog post explains how you can configure Wireshark to read decrypted TLS packets directly from PolarProxy over a TCP socket. Did you know that it is possible to stream captured packets from a remote device or application to Wireshark in real-time using PCAP-over-IP?
0 Comments
Leave a Reply. |