我只想使用 wireshark 的解说功能,我需要关闭 Qt 接口



我只想使用wireshark的dissector函数,我需要关闭Qt接口。我该怎么做?我想让它成为一个只有dissector函数的可执行程序,以解密tls应用程序数据。

正如其他人所说,使用tshark

$ tshark -r /tmp/out.pcap -t ad -o "ssl.keylog_file: /tmp/ssl.keylog_file" 
-o "ssl.desegment_ssl_records: TRUE" -o "ssl.desegment_ssl_application_data: TRUE" 
-o "ssl.debug_file:/tmp/ssl-debug.log" -Y 'http or http2'
Running as user "root" and group "root". This could be dangerous.
10 2022-10-12 13:19:06.132362635 192.168.122.230 → 192.168.122.1 HTTP2 123 SETTINGS, WINDOW_UPDATE
11 2022-10-12 13:19:06.132520145 192.168.122.1 → 192.168.122.230 HTTP2 119 Magic
12 2022-10-12 13:19:06.132565302 192.168.122.1 → 192.168.122.230 HTTP2 122 SETTINGS
13 2022-10-12 13:19:06.132572597 192.168.122.1 → 192.168.122.230 HTTP2 108 WINDOW_UPDATE
15 2022-10-12 13:19:06.132728591 192.168.122.230 → 192.168.122.1 HTTP2 104 SETTINGS
16 2022-10-12 13:19:06.133008405 192.168.122.1 → 192.168.122.230 HTTP2 140 HEADERS
17 2022-10-12 13:19:06.133038924 192.168.122.1 → 192.168.122.230 HTTP2 104 SETTINGS
19 2022-10-12 13:19:06.134550933 192.168.122.230 → 192.168.122.1 HTTP2 202 HEADERS, DATA
23 2022-10-12 13:19:06.135134429 192.168.122.230 → 192.168.122.1 HTTP2 112 GOAWAY

最新更新