ssldump 0.9b3 review

ssldump is an SSLv3/TLS network protocol analyzer

License: GPL (GNU General Public License) File size: 134K Developer: Eric Rescorla

0

ssldump is an SSLv3/TLS network protocol analyzer. It identifies TCP connections on the chosen network interface and attempts to interpret them as SSLv3/TLS traffic. When it identifies SSLv3/TLS traffic, it decodes the records and displays them in a textual form to the console.

ssldump depends on the libpcap capture library. Some systems (e.g. FreeBSD) now have libpcap as part of their standard install. On other systems, you will need to install it. You can obtain the distribution from:
http://www.tcpdump.org/

If linked with OpenSSL, ssldump can display certificates in decoded form and decrypt traffic (provided that it has the appropriate keying material). Again, OpenSSL may be installed on your system. Otherwise you can obtain it from:
http://www.openssl.org/

What's New in This Release:
Security fix: some potential over and underflows
Added support for VLANs.
Added -P flag to disable promiscuous mode.
Fixed bugs in the TCP reassembly code. A lot of bug fixes.