BLOG     |     FORUM

Forum Login

Login is optional - if you want to be notified about responses via email. You can also simply ask a question without logging in.



Just ask your question

No signup required

There is no need to sign up or register to ask a question in the forums.

Just ask your question.

You need to signup if you wish to be notified of answers to your question by email.

Other links

Other ways to reach us

Follow us on Twitter

Follow on twitter

Send us an email

mail us

Welcome, Guest
Please Login or Register.    Lost Password?

No session key in logs
(1 viewing) (1) Guest
All your questions answered real quick by Unleash Networks Engineers.
Go to bottom
Post Reply
Post New Topic
Page: 1
TOPIC: No session key in logs
#96
No session key in logs 5 Years ago Karma: 0
I had set the API trace level to info, also set other traces to info. Here the logs had been displayed, but nowhere i found the session key of either the server or the client.

I had set the "WRITE TRACE TO FILE" option, then to which file the Log Trace will be written.

If iam getting a page cannot be displayed error during an ssl session, will the unsniffer is capable of delivering the logs for the cause of failure.
Enter code here   
Please note: although no board code and smiley buttons are shown, they are still usable.
Reply Quote
 
#97
Re:No session key in logs 5 Years ago  
Hi Ashok,

I checked with the developer yesterday. We do not write the session key (the master secret) to the log for security reasons. The log is permanent unlike capture files/key files. Moreover, the session key is not very important.

Unsniff can help you debug the "page cannot be displayed error". One obvious cause could be, you are sending a GET request and nothing is coming back in return. To debug these kinds of higher layer problems, enable the "Analyze Upper Layers" option in the TLS plugin. To do it.

1. Plugins->Customize
2. Locate the TLS option
3. Set the "Analyze upper layers" to TRUE

Next,
Import your capture file or start a new capture.
Then switch to the Sessions sheet. You will find a decrypted HTTPS session. Open it.

You will find all the HTTP requests that went out on the TLS session. See if any error is returned by the server, or whether it is not responding.

You mentioned a proxy server, does it forward TLS ? Is it a "transparent proxy" ? If so, it will not forward TLS. This is where I would look first.

Hope that helps,
Vivek
Enter code here   
Please note: although no board code and smiley buttons are shown, they are still usable.
netscript

Reply Quote
 
Go to top
Post Reply
Post New Topic
Page: 1