<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hello,</p>
<p>there were some limitations in sngrep for capturing tls traffic:</p>
<p> * <a class="moz-txt-link-freetext" href="https://github.com/irontec/sngrep/issues/112">https://github.com/irontec/sngrep/issues/112</a></p>
<p>Not sure if there was any work afterwards to improve. The best
place to ask in on sngrep project.<br>
</p>
<p>Anyhow, I want to add that if you use Kamailio, then you can load
sipdump module and get the traffic stored in pcap files -- it
requires master branch:</p>
<p> *
<a class="moz-txt-link-freetext" href="https://www.kamailio.org/docs/modules/devel/modules/sipdump.html#sipdump.p.mode">https://www.kamailio.org/docs/modules/devel/modules/sipdump.html#sipdump.p.mode</a></p>
<p>For stable branches, sipdump can store the traffic in text files.</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div class="moz-cite-prefix">On 08.12.20 08:37, Yuriy Gorlichenko
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CABSP_Vcy+cB5v9pgGQrp1h+W64k38m+EVo52_P_DWjz86T__Rg@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="auto">As I remember sngrep doesn't work with TLS 1.3, so
may be it is your case.</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Tue, 8 Dec 2020, 08:01
Agiftel, <<a href="mailto:agiftel@gmail.com"
moz-do-not-send="true">agiftel@gmail.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Hi all, does
anyone was able to use sngrep (with -k option) to decrypt TLS<br>
connections?<br>
I'am doing what help says; used private key is the correct
one; but no<br>
traffic is seen on sngrep.<br>
If i use not ecrypted call i can see everything, so sngrep is
working good.<br>
<br>
Any hint?<br>
<br>
regards<br>
<br>
<br>
<br>
<br>
--<br>
Sent from: <a
href="http://sip-router.1086192.n5.nabble.com/Users-f3.html"
rel="noreferrer noreferrer" target="_blank"
moz-do-not-send="true">http://sip-router.1086192.n5.nabble.com/Users-f3.html</a><br>
<br>
_______________________________________________<br>
Kamailio (SER) - Users Mailing List<br>
<a href="mailto:sr-users@lists.kamailio.org" target="_blank"
rel="noreferrer" moz-do-not-send="true">sr-users@lists.kamailio.org</a><br>
<a
href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users"
rel="noreferrer noreferrer" target="_blank"
moz-do-not-send="true">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a>
<a class="moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Funding: <a class="moz-txt-link-freetext" href="https://www.paypal.me/dcmierla">https://www.paypal.me/dcmierla</a></pre>
</body>
</html>