google / google/gopacket

TLS ClientHello and TLS Alert not Parsed

Open
#905 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
6.8k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

I have a small network dump that only consists of a few packets. In total there are 2 TLS packets included in this dump:

- a ClientHello
- a TLSAlert

When I iterate over the dump the TLS layer will not be parsed but instead will be displayed as "Payload". When I use this payload to create a new packet like this:

`newPacket := gopacket.NewPacket(tcpLayer.LayerPayload(), layers.LayerTypeTLS, gopacket.Default)`

it is successfully parsed as a TLS packet. I double checked that `DecodeStreamsAsDatagrams` is set to `true`. I am bit confused, because every other dump I had so far worked like a charm. What would be the best way to debug this?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.