- The document contains debug log messages from Wireshark analyzing SSL network traffic.
- It shows Wireshark processing multiple SSL frames, attempting to decrypt the traffic, find private keys, and parse the SSL handshake protocol.
- However, Wireshark is unable to fully decrypt or parse the SSL traffic due to missing keys and insufficient data.
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0 ratings0% found this document useful (0 votes)
514 views783 pages
Wireshark SSL Debug Log
- The document contains debug log messages from Wireshark analyzing SSL network traffic.
- It shows Wireshark processing multiple SSL frames, attempting to decrypt the traffic, find private keys, and parse the SSL handshake protocol.
- However, Wireshark is unable to fully decrypt or parse the SSL traffic due to missing keys and insufficient data.
dissect_ssl enter frame #4 (first time) ssl_session_init: initializing ptr 000000000840E720 size 712 association_find: TCP port 40931 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B1058, ssl_session = 000000000840E720 record: offset = 0, reported_length_remaining = 216 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 211, ssl state 0x00 association_find: TCP port 40931 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 207 bytes, remaining 2 16 packet_from_server: is from server - FALSE ssl_find_private_key server 173.194.113.8:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #6 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B1058, ssl_session = 000000000840E720 record: offset = 0, reported_length_remaining = 133 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 81, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 77 bytes, remaining 86
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session can't find stored session trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0xC011 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 86, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 92, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 198 offset 97 length 3950102 bytes, rema ining 133 dissect_ssl enter frame #8 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B1058, ssl_session = 000000000840E720 record: offset = 0, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 6, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 17 offset 11 length 2889857 bytes, remai ning 47 dissect_ssl enter frame #10 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B1058, ssl_session = 000000000840E720 record: offset = 0, reported_length_remaining = 536 need_desegmentation: offset = 0, reported_length_remaining = 536 dissect_ssl enter frame #12 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B1058, ssl_session = 000000000840E720 record: offset = 0, reported_length_remaining = 608 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 603, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 40931 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #14 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B1058, ssl_session = 000000000840E720 record: offset = 0, reported_length_remaining = 405 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 400, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #16 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B1058, ssl_session = 000000000840E720 record: offset = 0, reported_length_remaining = 30 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 25, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #28 (first time) ssl_session_init: initializing ptr 00000000084110F0 size 712 association_find: TCP port 54210 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B14E0, ssl_session = 00000000084110F0 record: offset = 0, reported_length_remaining = 184 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 179, ssl state 0x00 association_find: TCP port 54210 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 175 bytes, remaining 1 84 packet_from_server: is from server - FALSE ssl_find_private_key server 85.195.69.171:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #33 (first time) ssl_session_init: initializing ptr 0000000008411BD0 size 712 association_find: TCP port 33219 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B1648, ssl_session = 0000000008411BD0 record: offset = 0, reported_length_remaining = 211 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 206, ssl state 0x00 association_find: TCP port 33219 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 202 bytes, remaining 2 11 packet_from_server: is from server - FALSE ssl_find_private_key server 107.23.26.91:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #35 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B14E0, ssl_session = 00000000084110F0 record: offset = 0, reported_length_remaining = 1460 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 89, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 85 bytes, remaining 94
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 dissect_ssl3_hnd_srv_hello found CIPHER 0xC014 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 94, reported_length_remaining = 1366 need_desegmentation: offset = 94, reported_length_remaining = 1366 dissect_ssl enter frame #37 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B14E0, ssl_session = 00000000084110F0 record: offset = 0, reported_length_remaining = 3315 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3310, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 5 length 3306 bytes, remaining 3315 dissect_ssl enter frame #37 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B14E0, ssl_session = 00000000084110F0 record: offset = 0, reported_length_remaining = 345 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 331, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 12 offset 5 length 327 bytes, remaining 336 record: offset = 336, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 341 length 0 bytes, remaining 345 dissect_ssl enter frame #39 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B14E0, ssl_session = 00000000084110F0 record: offset = 0, reported_length_remaining = 134 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 70, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 66 bytes, remaining 7 5 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 75, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 81, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 23 offset 86 length 12245465 bytes, rema ining 134 dissect_ssl enter frame #41 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B14E0, ssl_session = 00000000084110F0 record: offset = 0, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 6, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 58 offset 11 length 2755896 bytes, remai ning 59 dissect_ssl enter frame #43 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B14E0, ssl_session = 00000000084110F0 record: offset = 0, reported_length_remaining = 101 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 96, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 54210 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #45 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B1648, ssl_session = 0000000008411BD0 record: offset = 0, reported_length_remaining = 2076 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 89, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 85 bytes, remaining 94
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 dissect_ssl3_hnd_srv_hello found CIPHER 0xC013 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 94, reported_length_remaining = 1982 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 1632, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 99 length 1628 bytes, remainin g 1731 record: offset = 1731, reported_length_remaining = 345 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 331, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 12 offset 1736 length 327 bytes, remaini ng 2067 record: offset = 2067, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 2072 length 0 bytes, remaining 2076 dissect_ssl enter frame #47 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B14E0, ssl_session = 00000000084110F0 record: offset = 0, reported_length_remaining = 309 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 304, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #48 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B1648, ssl_session = 0000000008411BD0 record: offset = 0, reported_length_remaining = 134 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 70, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 66 bytes, remaining 7 5 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 75, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 81, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 229 offset 86 length 8156654 bytes, rema ining 134 dissect_ssl enter frame #54 (first time) ssl_session_init: initializing ptr 0000000008413F00 size 712 association_find: TCP port 51851 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B1990, ssl_session = 0000000008413F00 record: offset = 0, reported_length_remaining = 184 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 179, ssl state 0x00 association_find: TCP port 51851 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 175 bytes, remaining 1 84 packet_from_server: is from server - FALSE ssl_find_private_key server 85.195.69.170:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #56 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B1648, ssl_session = 0000000008411BD0 record: offset = 0, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 6, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 48 offset 11 length 4879913 bytes, remai ning 59 dissect_ssl enter frame #57 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B1648, ssl_session = 0000000008411BD0 record: offset = 0, reported_length_remaining = 330 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 32, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 33219 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 record: offset = 37, reported_length_remaining = 293 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 288, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 33219 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #59 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B1990, ssl_session = 0000000008413F00 record: offset = 0, reported_length_remaining = 3754 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 89, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 85 bytes, remaining 94
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 dissect_ssl3_hnd_srv_hello found CIPHER 0xC014 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 94, reported_length_remaining = 3660 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3310, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 99 length 3306 bytes, remainin g 3409 record: offset = 3409, reported_length_remaining = 345 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 331, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 12 offset 3414 length 327 bytes, remaini ng 3745 record: offset = 3745, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 3750 length 0 bytes, remaining 3754 dissect_ssl enter frame #61 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B1990, ssl_session = 0000000008413F00 record: offset = 0, reported_length_remaining = 134 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 70, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 66 bytes, remaining 7 5 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 75, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 81, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 61 offset 86 length 15491258 bytes, rema ining 134 dissect_ssl enter frame #63 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B1990, ssl_session = 0000000008413F00 record: offset = 0, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 6, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 60 offset 11 length 2037244 bytes, remai ning 59 dissect_ssl enter frame #65 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B1648, ssl_session = 0000000008411BD0 record: offset = 0, reported_length_remaining = 293 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 288, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #66 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B1990, ssl_session = 0000000008413F00 record: offset = 0, reported_length_remaining = 536 need_desegmentation: offset = 0, reported_length_remaining = 536 dissect_ssl enter frame #68 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B1990, ssl_session = 0000000008413F00 record: offset = 0, reported_length_remaining = 757 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 752, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 51851 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #70 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B1648, ssl_session = 0000000008411BD0 record: offset = 0, reported_length_remaining = 37 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 32, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #75 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B1990, ssl_session = 0000000008413F00 record: offset = 0, reported_length_remaining = 709 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 704, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #80 (first time) ssl_session_init: initializing ptr 0000000008416670 size 712 association_find: TCP port 33222 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B1DB8, ssl_session = 0000000008416670 record: offset = 0, reported_length_remaining = 211 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 206, ssl state 0x00 association_find: TCP port 33222 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 202 bytes, remaining 2 11 packet_from_server: is from server - FALSE ssl_find_private_key server 107.23.26.91:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #113 (first time) ssl_session_init: initializing ptr 000000000841A170 size 712 association_find: TCP port 58428 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B27C0, ssl_session = 000000000841A170 record: offset = 0, reported_length_remaining = 222 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 217, ssl state 0x00 association_find: TCP port 58428 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 213 bytes, remaining 2 22 packet_from_server: is from server - FALSE ssl_find_private_key server 77.67.4.18:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #117 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B27C0, ssl_session = 000000000841A170 record: offset = 0, reported_length_remaining = 3347 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 52, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 48 bytes, remaining 57
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session Cannot restore using an empty SessionID trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0x0005 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 57, reported_length_remaining = 3290 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3276, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 62 length 3272 bytes, remainin g 3338 record: offset = 3338, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 3343 length 0 bytes, remaining 3347 dissect_ssl enter frame #127 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B27C0, ssl_session = 000000000841A170 record: offset = 0, reported_length_remaining = 314 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 262, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 258 bytes, remaining 267 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 267, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 273, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 117 offset 278 length 11308478 bytes, re maining 314 dissect_ssl enter frame #134 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B27C0, ssl_session = 000000000841A170 record: offset = 0, reported_length_remaining = 254 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 202, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 4 offset 5 length 198 bytes, remaining 2 07 ssl_save_session_ticket stored session_ticket[192]: | 3d 52 ae 73 bc 14 98 3f 33 6b a3 a6 46 9d 0e 79 |=R.s...?3k..F..y| | 19 e8 80 a6 18 fb 6f 87 62 77 99 b3 17 33 47 17 |......o.bw...3G.| | fc 93 c8 20 d9 76 35 e7 af ea db 35 b9 b0 11 1a |... .v5....5....| | c8 03 24 0a 3d 23 fb e6 0e 10 a4 8c 9c d1 95 07 |..$.=#..........| | f4 16 c0 5d 6e 96 03 f5 3f e3 1d ec d5 e6 09 b5 |...]n...?.......| | f2 44 53 fd ae d6 e3 5b 07 32 ea 17 2b 03 36 e0 |.DS....[.2..+.6.| | 14 61 5b 2c d5 05 bf 6c dc e8 20 2d 1e 87 95 3f |.a[,...l.. -...?| | d1 b1 ee 26 67 a3 f3 c7 ea ba 8e 9b 00 f8 92 7c |...&g..........|| | 0b e7 8c 09 33 2a c2 86 ee da 43 0d e4 69 fa 38 |....3*....C..i.8| | 76 21 52 fa 66 5e a6 3b 24 12 5b cc 06 7a ac 4f |v!R.f^.;$.[..z.O| | d6 81 29 0f 01 39 01 fc 1a 5d b2 35 84 33 c1 a6 |..)..9...].5.3..| | 16 46 2d aa 28 c7 1a ec 79 d3 47 3e 19 36 cc 1e |.F-.(...y.G>.6..| ssl_save_session_ticket stored master secret[48]: | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| record: offset = 207, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 213, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 47 offset 218 length 12397129 bytes, rem aining 254 dissect_ssl enter frame #135 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B27C0, ssl_session = 000000000841A170 record: offset = 0, reported_length_remaining = 256 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 251, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 58428 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #137 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B27C0, ssl_session = 000000000841A170 record: offset = 0, reported_length_remaining = 8660 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 8655, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #176 (first time) ssl_session_init: initializing ptr 0000000008420390 size 712 association_find: TCP port 38526 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B3780, ssl_session = 0000000008420390 record: offset = 0, reported_length_remaining = 222 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 217, ssl state 0x00 association_find: TCP port 38526 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 213 bytes, remaining 2 22 packet_from_server: is from server - FALSE ssl_find_private_key server 77.67.4.58:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #178 (first time) ssl_session_init: initializing ptr 0000000008420950 size 712 association_find: TCP port 45369 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B3690, ssl_session = 0000000008420950 record: offset = 0, reported_length_remaining = 216 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 211, ssl state 0x00 association_find: TCP port 45369 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 207 bytes, remaining 2 16 packet_from_server: is from server - FALSE ssl_find_private_key server 173.194.113.8:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #180 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B3690, ssl_session = 0000000008420950 record: offset = 0, reported_length_remaining = 133 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 81, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 77 bytes, remaining 86
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session can't find stored session trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0xC011 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 86, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 92, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 19 offset 97 length 7991829 bytes, remai ning 133 dissect_ssl enter frame #181 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B3780, ssl_session = 0000000008420390 record: offset = 0, reported_length_remaining = 3347 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 52, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 48 bytes, remaining 57
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session Cannot restore using an empty SessionID trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0x0005 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 57, reported_length_remaining = 3290 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3276, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 62 length 3272 bytes, remainin g 3338 record: offset = 3338, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 3343 length 0 bytes, remaining 3347 dissect_ssl enter frame #183 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B3690, ssl_session = 0000000008420950 record: offset = 0, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 6, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 193 offset 11 length 524324 bytes, remai ning 47 dissect_ssl enter frame #186 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B3780, ssl_session = 0000000008420390 record: offset = 0, reported_length_remaining = 314 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 262, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 258 bytes, remaining 267 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 267, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 273, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 207 offset 278 length 12152078 bytes, re maining 314 dissect_ssl enter frame #189 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B3690, ssl_session = 0000000008420950 record: offset = 0, reported_length_remaining = 383 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 378, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 45369 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #191 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B3690, ssl_session = 0000000008420950 record: offset = 0, reported_length_remaining = 536 need_desegmentation: offset = 0, reported_length_remaining = 536 dissect_ssl enter frame #255 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B3690, ssl_session = 0000000008420950 record: offset = 0, reported_length_remaining = 16409 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 16404, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 45369 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #255 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B3690, ssl_session = 0000000008420950 record: offset = 0, reported_length_remaining = 207 need_desegmentation: offset = 0, reported_length_remaining = 207 dissect_ssl enter frame #299 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B3690, ssl_session = 0000000008420950 record: offset = 0, reported_length_remaining = 11875 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 11870, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 45369 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #313 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B3780, ssl_session = 0000000008420390 record: offset = 0, reported_length_remaining = 254 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 202, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 4 offset 5 length 198 bytes, remaining 2 07 ssl_save_session_ticket stored session_ticket[192]: | 3d 52 ae 73 bc 14 98 3f 33 6b a3 a6 46 9d 0e 79 |=R.s...?3k..F..y| | 5b 91 45 d4 86 dc d6 9b 73 3f 5f 20 c3 9a c2 6d |[.E.....s?_ ...m| | 58 3d e1 72 47 6d be 87 fb 7a b4 eb be c2 5c c8 |X=.rGm...z....\.| | 10 71 c3 29 58 f0 48 47 1e ac 6c a0 0f d1 ef 80 |.q.)X.HG..l.....| | ed c5 80 7d e6 30 88 67 1f 88 2b d4 cd 62 2d 7d |...}.0.g..+..b-}| | bf fe b8 95 98 e1 94 9e 68 88 91 39 67 8f bc 84 |........h..9g...| | e7 30 78 9d b9 36 46 6c b0 62 36 9b 85 81 3d 27 |.0x..6Fl.b6...='| | 7d 39 27 37 23 90 a2 3d ae 18 ff a8 f7 a9 69 e5 |}9'7#..=......i.| | cd 5f 78 eb 14 df e7 71 12 6b 2d b5 67 18 d5 10 |._x....q.k-.g...| | ca 9a af fd 06 52 88 13 08 b5 14 3e a6 a7 b3 2c |.....R.....>...,| | db 37 42 e8 4d 50 2f 8c ef a1 34 0b cb 6b 8e 12 |.7B.MP/...4..k..| | 11 35 93 9b 8a 51 c7 b3 ca 00 e6 23 57 68 49 76 |.5...Q.....#WhIv| ssl_save_session_ticket stored master secret[48]: | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| record: offset = 207, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 213, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 41 offset 218 length 15915000 bytes, rem aining 254 dissect_ssl enter frame #319 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B3780, ssl_session = 0000000008420390 record: offset = 0, reported_length_remaining = 257 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 252, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 38526 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #323 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B3780, ssl_session = 0000000008420390 record: offset = 0, reported_length_remaining = 10336 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 10331, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #325 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B3690, ssl_session = 0000000008420950 record: offset = 0, reported_length_remaining = 354 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 349, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #354 (first time) ssl_session_init: initializing ptr 0000000008431180 size 712 association_find: TCP port 56169 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B53D0, ssl_session = 0000000008431180 record: offset = 0, reported_length_remaining = 222 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 217, ssl state 0x00 association_find: TCP port 56169 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 213 bytes, remaining 2 22 packet_from_server: is from server - FALSE ssl_find_private_key server 77.67.4.49:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #366 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B53D0, ssl_session = 0000000008431180 record: offset = 0, reported_length_remaining = 3347 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 52, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 48 bytes, remaining 57
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session Cannot restore using an empty SessionID trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0x0005 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 57, reported_length_remaining = 3290 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3276, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 62 length 3272 bytes, remainin g 3338 record: offset = 3338, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 3343 length 0 bytes, remaining 3347 dissect_ssl enter frame #369 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B53D0, ssl_session = 0000000008431180 record: offset = 0, reported_length_remaining = 314 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 262, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 258 bytes, remaining 267 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 267, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 273, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 137 offset 278 length 13907222 bytes, re maining 314 dissect_ssl enter frame #380 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B53D0, ssl_session = 0000000008431180 record: offset = 0, reported_length_remaining = 254 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 202, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 4 offset 5 length 198 bytes, remaining 2 07 ssl_save_session_ticket stored session_ticket[192]: | 3d 52 ae 73 bc 14 98 3f 33 6b a3 a6 46 9d 0e 79 |=R.s...?3k..F..y| | 3f ae 78 13 a8 0d f5 d7 76 51 12 27 8e 17 3a ab |?.x.....vQ.'..:.| | 8f 1b 7d 06 57 3a cf d4 7d ec f3 5a 8a ef 13 29 |..}.W:..}..Z...)| | ab f1 13 d1 8b 64 2e 42 b1 c7 1f 41 85 83 60 57 |.....d.B...A..`W| | 55 4c 4c ee 05 eb 7f 84 7a 9e 8e d8 b6 2d 0a 2e |ULL.....z....-..| | ad 3e bd 7c 9e 8f d6 67 a4 9d d5 69 3f 1a 81 64 |.>.|...g...i?..d| | 08 75 ba 4a ea 8f 11 3d d1 82 86 2f ac 06 2c cc |.u.J...=.../..,.| | 42 6a e1 79 61 fb ac dd a2 9a b3 f5 8b e3 75 77 |Bj.ya.........uw| | 59 86 2f 03 2e b7 9e 49 32 98 40 2c a5 a4 c8 bf |Y./....I2.@,....| | fc 8b ce 08 cd 73 26 36 c6 d0 e8 b5 79 00 e8 cf |.....s&6....y...| | 27 94 30 43 16 63 bc 81 76 1e e7 5d c2 a7 56 fd |'.0C.c..v..]..V.| | 4a 27 33 45 94 61 96 af 33 61 ac d6 e6 2a 10 74 |J'3E.a..3a...*.t| ssl_save_session_ticket stored master secret[48]: | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| record: offset = 207, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 213, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 243 offset 218 length 16322168 bytes, re maining 254 dissect_ssl enter frame #382 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B53D0, ssl_session = 0000000008431180 record: offset = 0, reported_length_remaining = 257 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 252, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 56169 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #384 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B53D0, ssl_session = 0000000008431180 record: offset = 0, reported_length_remaining = 9161 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 9156, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #403 (first time) ssl_session_init: initializing ptr 0000000008435F10 size 712 association_find: TCP port 49384 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B5AF8, ssl_session = 0000000008435F10 record: offset = 0, reported_length_remaining = 222 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 217, ssl state 0x00 association_find: TCP port 49384 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 213 bytes, remaining 2 22 packet_from_server: is from server - FALSE ssl_find_private_key server 77.67.4.49:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #413 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B5AF8, ssl_session = 0000000008435F10 record: offset = 0, reported_length_remaining = 3347 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 52, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 48 bytes, remaining 57
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session Cannot restore using an empty SessionID trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0x0005 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 57, reported_length_remaining = 3290 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3276, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 62 length 3272 bytes, remainin g 3338 record: offset = 3338, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 3343 length 0 bytes, remaining 3347 dissect_ssl enter frame #428 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B5AF8, ssl_session = 0000000008435F10 record: offset = 0, reported_length_remaining = 314 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 262, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 258 bytes, remaining 267 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 267, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 273, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 26 offset 278 length 6733007 bytes, rema ining 314 dissect_ssl enter frame #431 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B5AF8, ssl_session = 0000000008435F10 record: offset = 0, reported_length_remaining = 254 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 202, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 4 offset 5 length 198 bytes, remaining 2 07 ssl_save_session_ticket stored session_ticket[192]: | 3d 52 ae 73 bc 14 98 3f 33 6b a3 a6 46 9d 0e 79 |=R.s...?3k..F..y| | 12 c1 9b 32 e6 1f c2 e4 c8 d0 cd 6d 38 d0 b4 c6 |...2.......m8...| | ec 06 0f 85 fb 1b 56 37 2c 3f 31 81 1d 25 db c7 |......V7,?1..%..| | 24 bc ac d6 ca 57 53 6b 21 26 e1 64 a0 2b ae da |$....WSk!&.d.+..| | 58 3a 97 4a f9 60 7c 9c e1 05 a1 de 70 4f f9 9b |X:.J.`|.....pO..| | 0e 3a 44 42 f1 7f 53 19 99 e7 12 8c f4 83 ca e0 |.:DB..S.........| | 3d ba 69 b5 db 94 1b 51 c6 e9 2c 0d fe 19 6c 79 |=.i....Q..,...ly| | 8e 5c a8 bc e5 08 76 4d f1 94 70 c8 8a d4 b1 02 |.\....vM..p.....| | ec 11 62 92 b0 90 d5 71 7f 84 03 97 42 e1 08 10 |..b....q....B...| | 4a 9f 1a 76 db 89 70 12 76 1d 85 7c 36 10 c2 f3 |J..v..p.v..|6...| | 9d 83 c7 93 42 24 3c 2f ca 42 47 74 fa 51 1e 1b |....B$</.BGt.Q..| | 94 8f bb c9 8a d3 9e 77 1d 99 82 f1 a0 01 cb 9d |.......w........| ssl_save_session_ticket stored master secret[48]: | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| record: offset = 207, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 213, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 222 offset 218 length 5406551 bytes, rem aining 254 dissect_ssl enter frame #436 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B5AF8, ssl_session = 0000000008435F10 record: offset = 0, reported_length_remaining = 258 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 253, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 49384 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #438 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B5AF8, ssl_session = 0000000008435F10 record: offset = 0, reported_length_remaining = 11183 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 11178, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #477 (first time) ssl_session_init: initializing ptr 000000000843D510 size 712 association_find: TCP port 56322 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B6CC0, ssl_session = 000000000843D510 record: offset = 0, reported_length_remaining = 222 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 217, ssl state 0x00 association_find: TCP port 56322 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 213 bytes, remaining 2 22 packet_from_server: is from server - FALSE ssl_find_private_key server 77.67.4.19:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #480 (first time) ssl_session_init: initializing ptr 000000000843DC10 size 712 association_find: TCP port 33267 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B6E90, ssl_session = 000000000843DC10 record: offset = 0, reported_length_remaining = 211 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 206, ssl state 0x00 association_find: TCP port 33267 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 202 bytes, remaining 2 11 packet_from_server: is from server - FALSE ssl_find_private_key server 107.23.26.91:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #482 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B6CC0, ssl_session = 000000000843D510 record: offset = 0, reported_length_remaining = 3347 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 52, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 48 bytes, remaining 57
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session Cannot restore using an empty SessionID trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0x0005 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 57, reported_length_remaining = 3290 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3276, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 62 length 3272 bytes, remainin g 3338 record: offset = 3338, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 3343 length 0 bytes, remaining 3347 dissect_ssl enter frame #484 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B6CC0, ssl_session = 000000000843D510 record: offset = 0, reported_length_remaining = 314 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 262, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 258 bytes, remaining 267 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 267, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 273, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 188 offset 278 length 3426510 bytes, rem aining 314 dissect_ssl enter frame #491 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B6E90, ssl_session = 000000000843DC10 record: offset = 0, reported_length_remaining = 2076 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 89, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 85 bytes, remaining 94
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 dissect_ssl3_hnd_srv_hello found CIPHER 0xC013 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 94, reported_length_remaining = 1982 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 1632, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 99 length 1628 bytes, remainin g 1731 record: offset = 1731, reported_length_remaining = 345 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 331, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 12 offset 1736 length 327 bytes, remaini ng 2067 record: offset = 2067, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 2072 length 0 bytes, remaining 2076 dissect_ssl enter frame #493 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B6E90, ssl_session = 000000000843DC10 record: offset = 0, reported_length_remaining = 134 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 70, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 66 bytes, remaining 7 5 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 75, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 81, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 196 offset 86 length 15828471 bytes, rem aining 134 dissect_ssl enter frame #496 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B6CC0, ssl_session = 000000000843D510 record: offset = 0, reported_length_remaining = 254 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 202, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 4 offset 5 length 198 bytes, remaining 2 07 ssl_save_session_ticket stored session_ticket[192]: | 3d 52 ae 73 bc 14 98 3f 33 6b a3 a6 46 9d 0e 79 |=R.s...?3k..F..y| | 18 8d 72 64 71 c6 7a 19 f3 fd 09 8e 06 3d e6 07 |..rdq.z......=..| | d4 ae f3 ec 3e a5 78 aa af f7 8c 6e 77 f2 3d a5 |....>.x....nw.=.| | cc b4 c8 4b ee 2a e5 f5 73 dd 23 65 c2 34 ff 6b |...K.*..s.#e.4.k| | 89 de 7d c9 01 90 5f fe ce 8b 70 2c 6d dd ba f1 |..}..._...p,m...| | 2c 60 e8 33 f5 de af 11 b7 16 33 d9 1b e1 7c 67 |,`.3......3...|g| | 6a 83 45 f4 8c c2 ba e0 40 18 0b d8 19 c5 3f 69 |j.E.....@.....?i| | 2c 34 90 57 e2 15 59 3c e5 db 24 fe 0e 2f 59 ca |,4.W..Y<..$../Y.| | e0 90 51 b2 9f 08 83 9c b3 b7 89 22 95 bf f8 26 |..Q........"...&| | b5 f6 7c 34 46 01 7f 01 f4 6e d3 8f 83 21 bb 2a |..|4F....n...!.*| | 21 0c a4 56 89 e8 18 e2 70 ce 15 90 1c 90 ac 0c |!..V....p.......| | f6 d3 88 8f 8b 7c 35 54 fd 93 2b 98 90 55 0d 91 |.....|5T..+..U..| ssl_save_session_ticket stored master secret[48]: | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| record: offset = 207, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 213, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 12 offset 218 length 3958093 bytes, rema ining 254 dissect_ssl enter frame #497 (first time) ssl_session_init: initializing ptr 000000000843FC90 size 712 association_find: TCP port 58640 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B7340, ssl_session = 000000000843FC90 record: offset = 0, reported_length_remaining = 27 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x10 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 22, ssl state 0x10 association_find: TCP port 58640 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #502 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B6CC0, ssl_session = 000000000843D510 record: offset = 0, reported_length_remaining = 257 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 252, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 56322 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #504 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B6E90, ssl_session = 000000000843DC10 record: offset = 0, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 6, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 106 offset 11 length 1351593 bytes, rema ining 59 dissect_ssl enter frame #505 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B6E90, ssl_session = 000000000843DC10 record: offset = 0, reported_length_remaining = 346 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 32, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 33267 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 record: offset = 37, reported_length_remaining = 309 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 304, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 33267 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #507 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B6CC0, ssl_session = 000000000843D510 record: offset = 0, reported_length_remaining = 9730 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 9725, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #509 (first time) ssl_session_init: initializing ptr 0000000008441020 size 712 association_find: TCP port 53031 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B7580, ssl_session = 0000000008441020 record: offset = 0, reported_length_remaining = 27 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x10 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 22, ssl state 0x10 association_find: TCP port 53031 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #510 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B6E90, ssl_session = 000000000843DC10 record: offset = 0, reported_length_remaining = 8202 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 7264, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 record: offset = 7269, reported_length_remaining = 933 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 928, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #516 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B6E90, ssl_session = 000000000843DC10 record: offset = 0, reported_length_remaining = 37 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 32, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #525 (first time) ssl_session_init: initializing ptr 0000000008442520 size 712 association_find: TCP port 53572 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B7848, ssl_session = 0000000008442520 record: offset = 0, reported_length_remaining = 27 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x10 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 22, ssl state 0x10 association_find: TCP port 53572 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #537 (first time) ssl_session_init: initializing ptr 0000000008443490 size 712 association_find: TCP port 32818 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B7BA8, ssl_session = 0000000008443490 record: offset = 0, reported_length_remaining = 216 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 211, ssl state 0x00 association_find: TCP port 32818 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 207 bytes, remaining 2 16 packet_from_server: is from server - FALSE ssl_find_private_key server 173.194.113.48:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #541 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B7BA8, ssl_session = 0000000008443490 record: offset = 0, reported_length_remaining = 133 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 81, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 77 bytes, remaining 86
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session can't find stored session trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0xC011 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 86, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 92, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 51 offset 97 length 2366456 bytes, remai ning 133 dissect_ssl enter frame #554 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B7BA8, ssl_session = 0000000008443490 record: offset = 0, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 6, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 221 offset 11 length 14909851 bytes, rem aining 47 dissect_ssl enter frame #556 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B7BA8, ssl_session = 0000000008443490 record: offset = 0, reported_length_remaining = 536 need_desegmentation: offset = 0, reported_length_remaining = 536 dissect_ssl enter frame #569 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B7BA8, ssl_session = 0000000008443490 record: offset = 0, reported_length_remaining = 791 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 786, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 32818 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #572 (first time) ssl_session_init: initializing ptr 00000000084474E0 size 712 association_find: TCP port 37382 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B8300, ssl_session = 00000000084474E0 record: offset = 0, reported_length_remaining = 222 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 217, ssl state 0x00 association_find: TCP port 37382 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 213 bytes, remaining 2 22 packet_from_server: is from server - FALSE ssl_find_private_key server 23.14.92.136:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #574 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B7BA8, ssl_session = 0000000008443490 record: offset = 0, reported_length_remaining = 454 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 449, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #576 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B8300, ssl_session = 00000000084474E0 record: offset = 0, reported_length_remaining = 3347 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 52, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 48 bytes, remaining 57
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session Cannot restore using an empty SessionID trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0x0005 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 57, reported_length_remaining = 3290 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3276, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 62 length 3272 bytes, remainin g 3338 record: offset = 3338, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 3343 length 0 bytes, remaining 3347 dissect_ssl enter frame #578 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B8300, ssl_session = 00000000084474E0 record: offset = 0, reported_length_remaining = 314 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 262, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 258 bytes, remaining 267 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 267, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 273, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 203 offset 278 length 3362507 bytes, rem aining 314 dissect_ssl enter frame #585 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B8300, ssl_session = 00000000084474E0 record: offset = 0, reported_length_remaining = 254 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 202, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 4 offset 5 length 198 bytes, remaining 2 07 ssl_save_session_ticket stored session_ticket[192]: | 3d 52 ae 73 bc 14 98 3f 33 6b a3 a6 46 9d 0e 79 |=R.s...?3k..F..y| | 2c d9 e1 99 a4 67 9e dc cc 2a 3c 0a 8c a7 c1 35 |,....g...*<....5| | dc 4a 6e e7 3a db d8 ac a8 81 e3 3b 12 4c 33 b1 |.Jn.:......;.L3.| | 0e a2 ed db aa ca 8a 51 04 33 b5 0b 0e 27 9e f7 |.......Q.3...'..| | 50 70 e3 f1 83 ad ab c9 56 1f 1c 70 b4 ef e2 f8 |Pp......V..p....| | 17 97 e7 26 4e 90 01 72 36 98 33 3d 97 ba 26 a4 |...&N..r6.3=..&.| | b0 ae b0 21 06 68 81 4e 6d d7 24 3b f3 fc 17 da |...!.h.Nm.$;....| | 34 44 83 ef 34 09 d3 e9 72 b6 7b 27 4b 41 8b 08 |4D..4...r.{'KA..| | 1b b7 52 de 02 9e cf 05 2d 20 9a 0b f0 3a 36 c8 |..R.....- ...:6.| | 9c 3d f7 98 74 92 d5 fa 6f 08 c9 4b 43 f2 2e fc |.=..t...o..KC...| | 39 21 57 9f 5b 9c 46 62 29 f1 a5 81 30 9f db b6 |9!W.[.Fb)...0...| | 40 b2 88 44 8c 61 a7 89 0b d2 4e 00 2f b4 8d 92 |@..D.a....N./...| ssl_save_session_ticket stored master secret[48]: | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| record: offset = 207, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 213, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 194 offset 218 length 9774990 bytes, rem aining 254 dissect_ssl enter frame #590 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B8300, ssl_session = 00000000084474E0 record: offset = 0, reported_length_remaining = 257 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 252, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 37382 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #614 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B8300, ssl_session = 00000000084474E0 record: offset = 0, reported_length_remaining = 1448 need_desegmentation: offset = 0, reported_length_remaining = 1448 dissect_ssl enter frame #616 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B8300, ssl_session = 00000000084474E0 record: offset = 0, reported_length_remaining = 8044 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 8039, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #618 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B27C0, ssl_session = 000000000841A170 record: offset = 0, reported_length_remaining = 27 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 22, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #647 (first time) ssl_session_init: initializing ptr 000000000844E930 size 712 association_find: TCP port 45363 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B9100, ssl_session = 000000000844E930 record: offset = 0, reported_length_remaining = 222 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 217, ssl state 0x00 association_find: TCP port 45363 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 213 bytes, remaining 2 22 packet_from_server: is from server - FALSE ssl_find_private_key server 77.67.4.18:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #684 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B9100, ssl_session = 000000000844E930 record: offset = 0, reported_length_remaining = 1448 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 52, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 48 bytes, remaining 57
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session Cannot restore using an empty SessionID trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0x0005 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 57, reported_length_remaining = 1391 need_desegmentation: offset = 57, reported_length_remaining = 1391 dissect_ssl enter frame #691 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B9100, ssl_session = 000000000844E930 record: offset = 0, reported_length_remaining = 3281 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3276, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 5 length 3272 bytes, remaining 3281 dissect_ssl enter frame #691 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B9100, ssl_session = 000000000844E930 record: offset = 0, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 5 length 0 bytes, remaining 9 dissect_ssl enter frame #693 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B9100, ssl_session = 000000000844E930 record: offset = 0, reported_length_remaining = 314 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 262, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 258 bytes, remaining 267 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 267, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 273, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 185 offset 278 length 6587656 bytes, rem aining 314 dissect_ssl enter frame #695 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B9100, ssl_session = 000000000844E930 record: offset = 0, reported_length_remaining = 254 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 202, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 4 offset 5 length 198 bytes, remaining 2 07 ssl_save_session_ticket stored session_ticket[192]: | 3d 52 ae 73 bc 14 98 3f 33 6b a3 a6 46 9d 0e 79 |=R.s...?3k..F..y| | 1f 4d 33 08 d7 48 49 10 94 96 53 8d f2 3e 7f 71 |.M3..HI...S..>.q| | 08 13 52 ea 13 05 88 5a ee df b1 ac a5 09 2d 5b |..R....Z......-[| | 05 e7 c6 3d c9 02 5d 31 3a 25 55 42 8f ce 0b 14 |...=..]1:%UB....| | af 2a 5d f0 a9 42 25 7d a6 4c ee 71 58 6a fd 79 |.*]..B%}.L.qXj.y| | 23 d2 4e 6c 60 e1 35 55 d2 08 1b 13 f8 73 45 e9 |#.Nl`.5U.....sE.| | 4d 15 2c d0 45 21 34 00 df c1 34 db f6 1b c8 35 |M.,.E!4...4....5| | 4e 2f 99 5b 65 5b 2d b4 62 31 19 a2 d9 8c 2d 06 |N/.[e[-.b1....-.| | 71 23 95 6f 9f b8 8b 7b 06 a9 f0 6d f3 0c a4 39 |q#.o...{...m...9| | 6f 89 ce 48 50 c6 cf b1 54 da f3 fc 0a 94 1c af |o..HP...T.......| | 68 9e 6c 52 30 a6 1f f9 89 3e 0e 63 f5 57 6a 3f |h.lR0....>.c.Wj?| | 38 3f ae 05 bc 3c 1e 25 a5 a2 58 fc 5d a5 36 ca |8?...<.%..X.].6.| ssl_save_session_ticket stored master secret[48]: | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| record: offset = 207, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 213, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 135 offset 218 length 16634753 bytes, re maining 254 dissect_ssl enter frame #696 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B9100, ssl_session = 000000000844E930 record: offset = 0, reported_length_remaining = 257 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 252, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 45363 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #698 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B9100, ssl_session = 000000000844E930 record: offset = 0, reported_length_remaining = 1448 need_desegmentation: offset = 0, reported_length_remaining = 1448 dissect_ssl enter frame #700 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B9100, ssl_session = 000000000844E930 record: offset = 0, reported_length_remaining = 9036 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 9031, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #702 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B3780, ssl_session = 0000000008420390 record: offset = 0, reported_length_remaining = 27 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 22, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #712 (first time) ssl_session_init: initializing ptr 0000000008454910 size 712 association_find: TCP port 33291 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045B9C10, ssl_session = 0000000008454910 record: offset = 0, reported_length_remaining = 211 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 206, ssl state 0x00 association_find: TCP port 33291 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 202 bytes, remaining 2 11 packet_from_server: is from server - FALSE ssl_find_private_key server 107.23.26.91:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #725 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B9C10, ssl_session = 0000000008454910 record: offset = 0, reported_length_remaining = 1448 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 89, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 85 bytes, remaining 94
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 dissect_ssl3_hnd_srv_hello found CIPHER 0xC013 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 94, reported_length_remaining = 1354 need_desegmentation: offset = 94, reported_length_remaining = 1354 dissect_ssl enter frame #727 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B9C10, ssl_session = 0000000008454910 record: offset = 0, reported_length_remaining = 1637 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 1632, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 5 length 1628 bytes, remaining 1637 dissect_ssl enter frame #727 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B9C10, ssl_session = 0000000008454910 record: offset = 0, reported_length_remaining = 345 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 331, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 12 offset 5 length 327 bytes, remaining 336 record: offset = 336, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 341 length 0 bytes, remaining 345 dissect_ssl enter frame #729 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B9C10, ssl_session = 0000000008454910 record: offset = 0, reported_length_remaining = 134 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 70, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 66 bytes, remaining 7 5 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 75, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 81, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 241 offset 86 length 8877923 bytes, rema ining 134 dissect_ssl enter frame #731 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B9C10, ssl_session = 0000000008454910 record: offset = 0, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 6, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 63 offset 11 length 8343081 bytes, remai ning 59 dissect_ssl enter frame #732 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B9C10, ssl_session = 0000000008454910 record: offset = 0, reported_length_remaining = 426 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 32, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 33291 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 record: offset = 37, reported_length_remaining = 389 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 384, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 33291 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #738 (first time) packet_from_server: is from server - TRUE conversation = 00000000045B9C10, ssl_session = 0000000008454910 record: offset = 0, reported_length_remaining = 309 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 304, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #739 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B9C10, ssl_session = 0000000008454910 record: offset = 0, reported_length_remaining = 37 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 32, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #799 (first time) ssl_session_init: initializing ptr 000000000845D590 size 712 association_find: TCP port 33300 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045BADA8, ssl_session = 000000000845D590 record: offset = 0, reported_length_remaining = 211 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 206, ssl state 0x00 association_find: TCP port 33300 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 202 bytes, remaining 2 11 packet_from_server: is from server - FALSE ssl_find_private_key server 107.23.26.91:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #805 (first time) ssl_session_init: initializing ptr 000000000845E2A0 size 712 association_find: TCP port 60741 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045BB0D8, ssl_session = 000000000845E2A0 record: offset = 0, reported_length_remaining = 222 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 217, ssl state 0x00 association_find: TCP port 60741 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 213 bytes, remaining 2 22 packet_from_server: is from server - FALSE ssl_find_private_key server 77.67.29.96:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #809 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BB0D8, ssl_session = 000000000845E2A0 record: offset = 0, reported_length_remaining = 1448 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 52, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 48 bytes, remaining 57
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session Cannot restore using an empty SessionID trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0x0005 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 57, reported_length_remaining = 1391 need_desegmentation: offset = 57, reported_length_remaining = 1391 dissect_ssl enter frame #811 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BB0D8, ssl_session = 000000000845E2A0 record: offset = 0, reported_length_remaining = 3281 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3276, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 5 length 3272 bytes, remaining 3281 dissect_ssl enter frame #811 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BB0D8, ssl_session = 000000000845E2A0 record: offset = 0, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 5 length 0 bytes, remaining 9 dissect_ssl enter frame #813 (first time) packet_from_server: is from server - FALSE conversation = 00000000045BB0D8, ssl_session = 000000000845E2A0 record: offset = 0, reported_length_remaining = 314 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 262, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 258 bytes, remaining 267 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 267, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 273, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 81 offset 278 length 1944157 bytes, rema ining 314 dissect_ssl enter frame #815 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BB0D8, ssl_session = 000000000845E2A0 record: offset = 0, reported_length_remaining = 254 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 202, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 4 offset 5 length 198 bytes, remaining 2 07 ssl_save_session_ticket stored session_ticket[192]: | 3d 52 ae 73 bc 14 98 3f 33 6b a3 a6 46 9d 0e 79 |=R.s...?3k..F..y| | 74 ff 24 73 e8 4e aa 96 0e 69 11 d0 fe 8e 8d 64 |t.$s.N...i.....d| | 39 9e dd 0b 8d 99 d7 d5 72 f7 37 b0 86 d7 b9 db |9.......r.7.....| | e6 63 de eb ca d9 53 11 cd ac 46 ca e2 7c ea ce |.c....S...F..|..| | 3f 2b ab f9 a9 41 04 1c 83 be 30 9f 36 5c c4 90 |?+...A....0.6\..| | e8 4c 57 c0 60 7b c7 f6 8c a5 62 cb f0 1f ae cf |.LW.`{....b.....| | 5d 6b b5 1a 6b 85 1e d1 9e d9 64 ed d6 3e 64 bd |]k..k.....d..>d.| | 4d 72 5e db a3 4a 47 26 fd ce ec af b2 6f 53 47 |Mr^..JG&.....oSG| | d9 99 81 11 5c 1d d2 bc e0 0f d1 3b 00 f6 56 2c |....\......;..V,| | 28 03 21 03 29 43 65 1a 8a e6 6b 0a 92 6b 4c 76 |(.!.)Ce...k..kLv| | 77 fc b8 c7 80 3a 62 81 67 f9 9d 97 64 00 ab bb |w....:b.g...d...| | d7 04 ae 05 5f 73 00 8e 0f b7 8b 5f b5 a0 b9 6a |...._s....._...j| ssl_save_session_ticket stored master secret[48]: | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| record: offset = 207, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 213, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 163 offset 218 length 12697343 bytes, re maining 254 dissect_ssl enter frame #816 (first time) packet_from_server: is from server - FALSE conversation = 00000000045BB0D8, ssl_session = 000000000845E2A0 record: offset = 0, reported_length_remaining = 256 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 251, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 60741 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #833 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BB0D8, ssl_session = 000000000845E2A0 record: offset = 0, reported_length_remaining = 1448 need_desegmentation: offset = 0, reported_length_remaining = 1448 dissect_ssl enter frame #835 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BB0D8, ssl_session = 000000000845E2A0 record: offset = 0, reported_length_remaining = 6252 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 6247, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #837 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B53D0, ssl_session = 0000000008431180 record: offset = 0, reported_length_remaining = 27 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 22, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #881 (first time) ssl_session_init: initializing ptr 0000000008465100 size 712 association_find: TCP port 33309 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045BBD60, ssl_session = 0000000008465100 record: offset = 0, reported_length_remaining = 211 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 206, ssl state 0x00 association_find: TCP port 33309 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 202 bytes, remaining 2 11 packet_from_server: is from server - FALSE ssl_find_private_key server 107.23.26.91:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #894 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BBD60, ssl_session = 0000000008465100 record: offset = 0, reported_length_remaining = 1448 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 89, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 85 bytes, remaining 94
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 dissect_ssl3_hnd_srv_hello found CIPHER 0xC013 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 94, reported_length_remaining = 1354 need_desegmentation: offset = 94, reported_length_remaining = 1354 dissect_ssl enter frame #896 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BBD60, ssl_session = 0000000008465100 record: offset = 0, reported_length_remaining = 1637 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 1632, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 5 length 1628 bytes, remaining 1637 dissect_ssl enter frame #896 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BBD60, ssl_session = 0000000008465100 record: offset = 0, reported_length_remaining = 345 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 331, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 12 offset 5 length 327 bytes, remaining 336 record: offset = 336, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 341 length 0 bytes, remaining 345 dissect_ssl enter frame #898 (first time) packet_from_server: is from server - FALSE conversation = 00000000045BBD60, ssl_session = 0000000008465100 record: offset = 0, reported_length_remaining = 134 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 70, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 66 bytes, remaining 7 5 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 75, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 81, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 224 offset 86 length 2940961 bytes, rema ining 134 dissect_ssl enter frame #900 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BBD60, ssl_session = 0000000008465100 record: offset = 0, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 6, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 106 offset 11 length 6754554 bytes, rema ining 59 dissect_ssl enter frame #901 (first time) packet_from_server: is from server - FALSE conversation = 00000000045BBD60, ssl_session = 0000000008465100 record: offset = 0, reported_length_remaining = 426 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 32, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 33309 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 record: offset = 37, reported_length_remaining = 389 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 384, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 33309 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #903 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BBD60, ssl_session = 0000000008465100 record: offset = 0, reported_length_remaining = 309 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 304, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #904 (first time) packet_from_server: is from server - FALSE conversation = 00000000045BBD60, ssl_session = 0000000008465100 record: offset = 0, reported_length_remaining = 37 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 32, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #952 (first time) ssl_session_init: initializing ptr 000000000846C5A0 size 712 association_find: TCP port 50841 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045BCF70, ssl_session = 000000000846C5A0 record: offset = 0, reported_length_remaining = 222 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 217, ssl state 0x00 association_find: TCP port 50841 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 213 bytes, remaining 2 22 packet_from_server: is from server - FALSE ssl_find_private_key server 77.67.4.49:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #993 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BCF70, ssl_session = 000000000846C5A0 record: offset = 0, reported_length_remaining = 1448 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 52, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 48 bytes, remaining 57
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session Cannot restore using an empty SessionID trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0x0005 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 57, reported_length_remaining = 1391 need_desegmentation: offset = 57, reported_length_remaining = 1391 dissect_ssl enter frame #997 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BCF70, ssl_session = 000000000846C5A0 record: offset = 0, reported_length_remaining = 3281 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3276, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 5 length 3272 bytes, remaining 3281 dissect_ssl enter frame #997 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BCF70, ssl_session = 000000000846C5A0 record: offset = 0, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 5 length 0 bytes, remaining 9 dissect_ssl enter frame #999 (first time) packet_from_server: is from server - FALSE conversation = 00000000045BCF70, ssl_session = 000000000846C5A0 record: offset = 0, reported_length_remaining = 314 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 262, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 258 bytes, remaining 267 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 267, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 273, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 4 offset 278 length 4636221 bytes, remai ning 314 dissect_ssl enter frame #1001 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BCF70, ssl_session = 000000000846C5A0 record: offset = 0, reported_length_remaining = 254 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 202, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 4 offset 5 length 198 bytes, remaining 2 07 ssl_save_session_ticket stored session_ticket[192]: | 3d 52 ae 73 bc 14 98 3f 33 6b a3 a6 46 9d 0e 79 |=R.s...?3k..F..y| | 9f 1f 65 a2 d8 79 3f d1 d7 fe b9 08 fc 94 39 33 |..e..y?.......93| | 5c 56 19 86 d9 eb 77 32 66 4f ef 72 3d 35 52 f2 |\V....w2fO.r=5R.| | 1e 62 68 53 cb 60 0d 81 f8 d6 46 d5 24 e9 7b 94 |.bhS.`....F.$.{.| | e3 c4 78 f0 c3 92 a5 a3 de 4c 8b 63 eb c1 12 c7 |..x......L.c....| | f3 fe a3 89 72 3b 08 17 a2 d3 f5 ba 08 71 dc 09 |....r;.......q..| | 1c 31 3d 9a 6b aa 83 56 3d 43 53 4c 03 b9 01 c2 |.1=.k..V=CSL....| | d9 d5 9f 5f b6 d8 5a 8c da 0c cb df 55 98 f0 7b |..._..Z.....U..{| | 25 89 2a 7c e7 49 5c f6 c2 e4 c0 98 4e b3 3d 12 |%.*|.I\.....N.=.| | 1a 6e 03 d4 c1 1b 5b 3e 47 54 b9 96 0a 30 35 b5 |.n....[>GT...05.| | 3f 1e 65 ed aa f7 65 0b 66 85 08 64 23 7a f2 8e |?.e...e.f..d#z..| | fe 15 0b f3 cf 7e 88 71 fc 74 c7 5f 9b a1 8b be |.....~.q.t._....| ssl_save_session_ticket stored master secret[48]: | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| record: offset = 207, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 213, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 239 offset 218 length 2816132 bytes, rem aining 254 dissect_ssl enter frame #1002 (first time) packet_from_server: is from server - FALSE conversation = 00000000045BCF70, ssl_session = 000000000846C5A0 record: offset = 0, reported_length_remaining = 257 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 252, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 50841 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #1004 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BCF70, ssl_session = 000000000846C5A0 record: offset = 0, reported_length_remaining = 1448 need_desegmentation: offset = 0, reported_length_remaining = 1448 dissect_ssl enter frame #1006 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BCF70, ssl_session = 000000000846C5A0 record: offset = 0, reported_length_remaining = 6002 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 5997, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #1008 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B5AF8, ssl_session = 0000000008435F10 record: offset = 0, reported_length_remaining = 27 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 22, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #1069 (first time) ssl_session_init: initializing ptr 0000000008477870 size 712 association_find: TCP port 33142 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045BE5E0, ssl_session = 0000000008477870 record: offset = 0, reported_length_remaining = 220 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 215, ssl state 0x00 association_find: TCP port 33142 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 211 bytes, remaining 2 20 packet_from_server: is from server - FALSE ssl_find_private_key server 77.67.4.34:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #1091 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BE5E0, ssl_session = 0000000008477870 record: offset = 0, reported_length_remaining = 1448 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 52, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 48 bytes, remaining 57
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session Cannot restore using an empty SessionID trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0x0005 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 57, reported_length_remaining = 1391 need_desegmentation: offset = 57, reported_length_remaining = 1391 dissect_ssl enter frame #1095 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BE5E0, ssl_session = 0000000008477870 record: offset = 0, reported_length_remaining = 3281 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3276, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 5 length 3272 bytes, remaining 3281 dissect_ssl enter frame #1095 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BE5E0, ssl_session = 0000000008477870 record: offset = 0, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 5 length 0 bytes, remaining 9 dissect_ssl enter frame #1097 (first time) packet_from_server: is from server - FALSE conversation = 00000000045BE5E0, ssl_session = 0000000008477870 record: offset = 0, reported_length_remaining = 314 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 262, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 258 bytes, remaining 267 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 267, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 273, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 92 offset 278 length 12730357 bytes, rem aining 314 dissect_ssl enter frame #1114 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BE5E0, ssl_session = 0000000008477870 record: offset = 0, reported_length_remaining = 238 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 186, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 4 offset 5 length 182 bytes, remaining 1 91 ssl_save_session_ticket stored session_ticket[176]: | 3d 52 ae 73 bc 14 98 3f 33 6b a3 a6 46 9d 0e 79 |=R.s...?3k..F..y| | 33 92 2c e8 1c aa 16 37 fe 27 cb db b7 5c 73 5d |3.,....7.'...\s]| | 81 bc 64 8c 1b 5e 44 bb e2 de 72 f2 3d 03 4a 09 |..d..^D...r.=.J.| | 04 94 51 88 b3 ce ab 68 0b 79 05 94 02 bd db 7f |..Q....h.y......| | 74 11 39 7d e7 43 b5 ee 55 57 7f 5e 04 f8 e3 1e |t.9}.C..UW.^....| | d5 2b 96 89 1a 10 d0 8f 0d 2a d9 0c 9a 95 00 b8 |.+.......*......| | 25 80 fa 8e 9c 9e c5 25 db 6c a8 06 22 e4 96 ab |%......%.l.."...| | d0 4f e5 4a b6 de 3e b7 3a 0d db eb 95 72 70 0e |.O.J..>.:....rp.| | 0b aa cd 63 92 27 77 52 69 6b e9 72 7e d0 ec 91 |...c.'wRik.r~...| | 5a ee 80 04 9c ba d3 02 3c 40 fd 13 1f bc f2 b4 |Z.......<@......| | 0c 52 1e 10 2f c5 22 f9 db bb f0 2b 21 d8 79 6c |.R../."....+!.yl| ssl_save_session_ticket stored master secret[48]: | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| record: offset = 191, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 197, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 200 offset 202 length 10247719 bytes, re maining 238 dissect_ssl enter frame #1115 (first time) packet_from_server: is from server - FALSE conversation = 00000000045BE5E0, ssl_session = 0000000008477870 record: offset = 0, reported_length_remaining = 243 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 238, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 33142 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #1118 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BE5E0, ssl_session = 0000000008477870 record: offset = 0, reported_length_remaining = 1448 need_desegmentation: offset = 0, reported_length_remaining = 1448 dissect_ssl enter frame #1120 (first time) packet_from_server: is from server - TRUE conversation = 00000000045BE5E0, ssl_session = 0000000008477870 record: offset = 0, reported_length_remaining = 5875 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 5870, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #1122 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B6CC0, ssl_session = 000000000843D510 record: offset = 0, reported_length_remaining = 27 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 22, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #1153 (first time) ssl_session_init: initializing ptr 000000000847F900 size 712 association_find: TCP port 42796 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045BF670, ssl_session = 000000000847F900 record: offset = 0, reported_length_remaining = 222 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 217, ssl state 0x00 association_find: TCP port 42796 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 213 bytes, remaining 2 22 packet_from_server: is from server - FALSE ssl_find_private_key server 77.67.4.26:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #1233 (first time) ssl_session_init: initializing ptr 0000000008487140 size 712 association_find: TCP port 50928 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045C0320, ssl_session = 0000000008487140 record: offset = 0, reported_length_remaining = 220 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 215, ssl state 0x00 association_find: TCP port 50928 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 211 bytes, remaining 2 20 packet_from_server: is from server - FALSE ssl_find_private_key server 77.67.4.34:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #1244 (first time) ssl_session_init: initializing ptr 0000000008488840 size 712 association_find: TCP port 33349 found 0000000000000000 packet_from_server: is from server - FALSE conversation = 00000000045C0748, ssl_session = 0000000008488840 record: offset = 0, reported_length_remaining = 211 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 206, ssl state 0x00 association_find: TCP port 33349 found 0000000000000000 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 1 offset 5 length 202 bytes, remaining 2 11 packet_from_server: is from server - FALSE ssl_find_private_key server 107.23.26.91:443 ssl_find_private_key: no keys found dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 dissect_ssl enter frame #1267 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0320, ssl_session = 0000000008487140 record: offset = 0, reported_length_remaining = 1448 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 52, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 48 bytes, remaining 57
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 ssl_restore_session Cannot restore using an empty SessionID trying to use SSL keylog in failed to open SSL keylog cannot find master secret in keylog file either dissect_ssl3_hnd_srv_hello found CIPHER 0x0005 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 57, reported_length_remaining = 1391 need_desegmentation: offset = 57, reported_length_remaining = 1391 dissect_ssl enter frame #1271 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0320, ssl_session = 0000000008487140 record: offset = 0, reported_length_remaining = 3281 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 3276, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 5 length 3272 bytes, remaining 3281 dissect_ssl enter frame #1271 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0320, ssl_session = 0000000008487140 record: offset = 0, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 5 length 0 bytes, remaining 9 dissect_ssl enter frame #1273 (first time) packet_from_server: is from server - FALSE conversation = 00000000045C0320, ssl_session = 0000000008487140 record: offset = 0, reported_length_remaining = 314 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 262, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 258 bytes, remaining 267 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 267, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 273, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 250 offset 278 length 14480510 bytes, re maining 314 dissect_ssl enter frame #1290 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0320, ssl_session = 0000000008487140 record: offset = 0, reported_length_remaining = 238 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 186, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 4 offset 5 length 182 bytes, remaining 1 91 ssl_save_session_ticket stored session_ticket[176]: | 3d 52 ae 73 bc 14 98 3f 33 6b a3 a6 46 9d 0e 79 |=R.s...?3k..F..y| | 3a 50 fb 19 5f 5d e0 2f f4 b0 27 72 4f 22 3c 5d |:P.._]./..'rO"<]| | 44 26 92 a1 24 24 5b 28 fc 95 87 1d e3 84 7f eb |D&..$$[(........| | bf 18 93 bc 70 ff 83 5b a4 10 76 6f 04 24 b8 6c |....p..[..vo.$.l| | 6d 2b 08 be c4 0a b8 74 18 8b d6 69 54 c5 98 9e |m+.....t...iT...| | 47 22 8c 2a 6a 49 52 70 17 8c 83 d8 a7 2e 53 e0 |G".*jIRp......S.| | b2 b8 c4 6a 25 88 0b 8e 03 07 7d f5 ad 64 a4 c8 |...j%.....}..d..| | 91 f8 c5 ac 3e ee a0 21 96 c1 78 b3 63 b1 cc 83 |....>..!..x.c...| | ab 43 bb ff a0 25 a3 b8 32 36 ce 8d fa ae ba 99 |.C...%..26......| | 87 45 4d 6b 87 11 40 51 71 4d bc dd 19 5a 7a 72 |[email protected]| | 0a b4 f8 d5 fa 8d 5f 05 f2 ae da de 4f 57 fc 40 |......_.....OW.@| ssl_save_session_ticket stored master secret[48]: | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| record: offset = 191, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 197, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 36, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 91 offset 202 length 12788679 bytes, rem aining 238 dissect_ssl enter frame #1291 (first time) packet_from_server: is from server - FALSE conversation = 00000000045C0320, ssl_session = 0000000008487140 record: offset = 0, reported_length_remaining = 244 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 239, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 50928 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #1309 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0748, ssl_session = 0000000008488840 record: offset = 0, reported_length_remaining = 1448 dissect_ssl3_record found version 0x0301(TLS 1.0) -> state 0x11 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 89, ssl state 0x11 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 85 bytes, remaining 94
dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 dissect_ssl3_hnd_srv_hello found CIPHER 0xC013 -> state 0x17 dissect_ssl3_hnd_srv_hello trying to generate keys ssl_generate_keyring_material not enough data to generate key (0x17 required 0x3 7 or 0x57) dissect_ssl3_hnd_srv_hello can't generate keyring material record: offset = 94, reported_length_remaining = 1354 need_desegmentation: offset = 94, reported_length_remaining = 1354 dissect_ssl enter frame #1311 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0748, ssl_session = 0000000008488840 record: offset = 0, reported_length_remaining = 1637 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 1632, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 11 offset 5 length 1628 bytes, remaining 1637 dissect_ssl enter frame #1311 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0748, ssl_session = 0000000008488840 record: offset = 0, reported_length_remaining = 345 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 331, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 12 offset 5 length 327 bytes, remaining 336 record: offset = 336, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 4, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 14 offset 341 length 0 bytes, remaining 345 dissect_ssl enter frame #1313 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0320, ssl_session = 0000000008487140 record: offset = 0, reported_length_remaining = 1448 need_desegmentation: offset = 0, reported_length_remaining = 1448 dissect_ssl enter frame #1314 (first time) packet_from_server: is from server - FALSE conversation = 00000000045C0748, ssl_session = 0000000008488840 record: offset = 0, reported_length_remaining = 134 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 70, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 16 offset 5 length 66 bytes, remaining 7 5 ssl_generate_pre_master_secret: found SSL_HND_CLIENT_KEY_EXCHG, state 17 trying to use SSL keylog in failed to open SSL keylog dissect_ssl3_handshake can't generate pre master secret record: offset = 75, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - FALSE ssl_change_cipher CLIENT record: offset = 81, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 229 offset 86 length 4996375 bytes, rema ining 134 dissect_ssl enter frame #1330 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0320, ssl_session = 0000000008487140 record: offset = 0, reported_length_remaining = 5384 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 5379, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #1332 (first time) packet_from_server: is from server - FALSE conversation = 00000000045B8300, ssl_session = 00000000084474E0 record: offset = 0, reported_length_remaining = 27 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 22, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #1345 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0748, ssl_session = 0000000008488840 record: offset = 0, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec packet_from_server: is from server - TRUE ssl_change_cipher SERVER record: offset = 6, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 48, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 32 offset 11 length 4314661 bytes, remai ning 59 dissect_ssl enter frame #1346 (first time) packet_from_server: is from server - FALSE conversation = 00000000045C0748, ssl_session = 0000000008488840 record: offset = 0, reported_length_remaining = 346 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 32, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 33349 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 record: offset = 37, reported_length_remaining = 309 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 304, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available association_find: TCP port 33349 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #1348 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0748, ssl_session = 0000000008488840 record: offset = 0, reported_length_remaining = 1448 need_desegmentation: offset = 0, reported_length_remaining = 1448 dissect_ssl enter frame #1350 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0748, ssl_session = 0000000008488840 record: offset = 0, reported_length_remaining = 5829 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 5824, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #1350 (first time) packet_from_server: is from server - TRUE conversation = 00000000045C0748, ssl_session = 0000000008488840 record: offset = 0, reported_length_remaining = 1877 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 1872, ssl state 0x17 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #1352 (first time) packet_from_server: is from server - FALSE conversation = 00000000045C0748, ssl_session = 0000000008488840 record: offset = 0, reported_length_remaining = 37 dissect_ssl3_record: content_type 21 Alert decrypt_ssl3_record: app_data len 32, ssl state 0x17 packet_from_server: is from server - FALSE decrypt_ssl3_record: using client decoder decrypt_ssl3_record: no decoder available dissect_ssl enter frame #4 (already visited) packet_from_server: is from server - FALSE conversation = 00000000045B1058, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 216 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 1 offset 5 length 207 bytes, remaining 2 16 dissect_ssl enter frame #6 (already visited) packet_from_server: is from server - TRUE conversation = 00000000045B1058, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 133 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 2 offset 5 length 77 bytes, remaining 86
record: offset = 86, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec record: offset = 92, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 198 offset 97 length 3950102 bytes, rema ining 133 dissect_ssl enter frame #8 (already visited) packet_from_server: is from server - FALSE conversation = 00000000045B1058, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 47 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec record: offset = 6, reported_length_remaining = 41 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 17 offset 11 length 2889857 bytes, remai ning 47 dissect_ssl enter frame #12 (already visited) packet_from_server: is from server - FALSE conversation = 00000000045B1058, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 608 dissect_ssl3_record: content_type 23 Application Data association_find: TCP port 40931 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #14 (already visited) packet_from_server: is from server - TRUE conversation = 00000000045B1058, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 405 dissect_ssl3_record: content_type 23 Application Data association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #16 (already visited) packet_from_server: is from server - TRUE conversation = 00000000045B1058, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 30 dissect_ssl3_record: content_type 23 Application Data association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #28 (already visited) packet_from_server: is from server - FALSE conversation = 00000000045B14E0, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 184 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 1 offset 5 length 175 bytes, remaining 1 84 dissect_ssl enter frame #33 (already visited) packet_from_server: is from server - FALSE conversation = 00000000045B1648, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 211 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 1 offset 5 length 202 bytes, remaining 2 11 dissect_ssl enter frame #35 (already visited) packet_from_server: is from server - TRUE conversation = 00000000045B14E0, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 1460 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 2 offset 5 length 85 bytes, remaining 94
record: offset = 94, reported_length_remaining = 1366 need_desegmentation: offset = 94, reported_length_remaining = 1366 dissect_ssl enter frame #37 (already visited) packet_from_server: is from server - TRUE conversation = 00000000045B14E0, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 3315 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 11 offset 5 length 3306 bytes, remaining 3315 dissect_ssl enter frame #37 (already visited) packet_from_server: is from server - TRUE conversation = 00000000045B14E0, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 345 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 12 offset 5 length 327 bytes, remaining 336 record: offset = 336, reported_length_remaining = 9 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 14 offset 341 length 0 bytes, remaining 345 dissect_ssl enter frame #39 (already visited) packet_from_server: is from server - FALSE conversation = 00000000045B14E0, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 134 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 16 offset 5 length 66 bytes, remaining 7 5 record: offset = 75, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec record: offset = 81, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 23 offset 86 length 12245465 bytes, rema ining 134 dissect_ssl enter frame #41 (already visited) packet_from_server: is from server - TRUE conversation = 00000000045B14E0, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 59 dissect_ssl3_record: content_type 20 Change Cipher Spec dissect_ssl3_change_cipher_spec record: offset = 6, reported_length_remaining = 53 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 58 offset 11 length 2755896 bytes, remai ning 59 dissect_ssl enter frame #43 (already visited) packet_from_server: is from server - FALSE conversation = 00000000045B14E0, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 101 dissect_ssl3_record: content_type 23 Application Data association_find: TCP port 54210 found 0000000000000000 association_find: TCP port 443 found 000000000415E230 dissect_ssl enter frame #45 (already visited) packet_from_server: is from server - TRUE conversation = 00000000045B1648, ssl_session = 0000000000000000 record: offset = 0, reported_length_remaining = 2076 dissect_ssl3_record: content_type 22 Handshake dissect_ssl3_handshake iteration 1 type 2 offset 5 length 85 bytes, remaining 94