SslDump

Pointers

• http://www.rtfm.com/ssldump/
• http://www.rtfm.com/ssldump/Ssldump.html - man page
• TcpDump
• LibPcap - the packet capture library and related tools
• Ethereal - see ethereal-ssl section

Example

    ssldump -d -r $dumpfile -k $key

Installing on os x

problems in configure script

• looking for .a files insetad of .dylib

    1106c1106
    <       if test -f $dir/libpcap.dylib; then
    ---
    >       if test -f $dir/libpcap.a; then
    1213,1216d1212
    <         if test -f $dir/libssl.dylib -a -f $dir/libcrypto.dylib;
    <         then
    <             found_ssl="true"
    <         fi

errors compiling

    /usr/include/net/bpf.h:91: error: redefinition of `struct bpf_program'
    /usr/include/net/bpf.h:115: error: redefinition of `struct bpf_version'
    /usr/include/net/bpf.h:322: error: redefinition of `struct bpf_insn'

• http://freaky.staticusers.net/ugboard/viewtopic.php?p=62713
• temporarily commented out structs in /usr/include/net/bpf.h
• compiled and installed ssldump
• then restored original /usr/include/net/bpf.h
• worked like a charm!

Installing on solaris 8

• install flex - http://www.gnu.org/software/flex/flex.html
• install m4 - http://mirrors.kernel.org/gnu/m4/
• install bison - http://mirrors.kernel.org/gnu/bison/
• install libpcap
• install openssl - quick fix - just using the nasty one in /usr/local
• errors compiling :(