[prev in list] [next in list] [prev in thread] [next in thread]
List: ntop
Subject: Re: [Ntop] SSL traffic
From: Luca Deri <deri () ntop ! org>
Date: 2012-08-30 12:01:42
Message-ID: D476B0DD-DA30-45ED-8D4F-C208A47CA3D9 () ntop ! org
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Arne
not quite. nDPI is able to decode the ssl certificate, hence it can decode protocols \
like viber of Apple iCloud.
Luca
On Aug 30, 2012, at 11:31 AM, Arne Van Theemsche <arnevt@gmail.com> wrote:
> I think the point of SSL is that nobody can see what's in the payload. So "enabling \
> a button to see what's inside" would worry me big time :)
> kind regards
> Arne Van Theemsche
>
>
> 2012/8/30 Noam Birnbaum <noam@maccentricsolutions.com>
> Hello everybody,
>
> SSL traffic is showing up at half of our LAN's network traffic. Do I need to do \
> anything special to enable the SSL decoder to get more insight into what's in this \
> traffic?
> Thanks,
> noam
>
>
> Noam Birnbaum
> Mac Daddy
> http://www.maccentricsolutions.com
> 877.luv.macs x666
> tweet @noamb
>
> Tech support —> 877.luv.macs or support@maccentricsolutions.com
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
[Attachment #5 (unknown)]
<html><head><meta http-equiv="Content-Type" content="text/html \
charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: \
space; -webkit-line-break: after-white-space; ">Arne<div>not quite. nDPI is able to \
decode the ssl certificate, hence it can decode protocols like viber of Apple \
iCloud.</div><div><br></div><div>Luca</div><div><br><div><div>On Aug 30, 2012, at \
11:31 AM, Arne Van Theemsche <<a \
href="mailto:arnevt@gmail.com">arnevt@gmail.com</a>> wrote:</div><br \
class="Apple-interchange-newline"><blockquote type="cite">I think the point of SSL is \
that nobody can see what's in the payload. So "enabling a button to see what's \
inside" would worry me big time :)<br><br>kind regards<br>Arne Van \
Theemsche<br><br><br><div class="gmail_quote"> 2012/8/30 Noam Birnbaum <span \
dir="ltr"><<a href="mailto:noam@maccentricsolutions.com" \
target="_blank">noam@maccentricsolutions.com</a>></span><br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"> <div style="word-wrap:break-word">Hello \
everybody,<div><br></div><div>SSL traffic is showing up at half of our LAN's network \
traffic. Do I need to do anything special to enable the SSL decoder to get more \
insight into what's in this traffic?</div> \
<div><br></div><div>Thanks,</div><div>noam</div><div><br></div><div><br><div> <span \
style="text-indent:0px;letter-spacing:normal;font-variant:normal;text-align:-webkit-au \
to;font-style:normal;font-weight:normal;line-height:normal;border-collapse:separate;te \
xt-transform:none;font-size:medium;white-space:normal;font-family:Optima;word-spacing:0px"><span \
style="text-indent:0px;letter-spacing:normal;font-variant:normal;font-style:normal;fon \
t-weight:normal;line-height:normal;border-collapse:separate;text-transform:none;font-size:medium;white-space:normal;font-family:Optima;word-spacing:0px"><div \
style="word-wrap:break-word"> <span \
style="text-indent:0px;letter-spacing:normal;font-variant:normal;font-style:normal;fon \
t-weight:normal;line-height:normal;border-collapse:separate;text-transform:none;font-size:medium;white-space:normal;font-family:Optima;word-spacing:0px"><div \
style="word-wrap:break-word"> <span \
style="text-indent:0px;letter-spacing:normal;font-variant:normal;font-style:normal;fon \
t-weight:normal;line-height:normal;border-collapse:separate;text-transform:none;font-size:medium;white-space:normal;font-family:Optima;word-spacing:0px"><div \
style="word-wrap:break-word"> <span \
style="text-indent:0px;letter-spacing:normal;font-variant:normal;font-style:normal;fon \
t-weight:normal;line-height:normal;border-collapse:separate;text-transform:none;font-size:medium;white-space:normal;font-family:Optima;word-spacing:0px"><div \
style="word-wrap:break-word"> <span \
style="text-indent:0px;letter-spacing:normal;font-variant:normal;font-style:normal;fon \
t-weight:normal;line-height:normal;border-collapse:separate;text-transform:none;font-size:medium;white-space:normal;font-family:Optima;word-spacing:0px"><div \
style="word-wrap:break-word"> <span \
style="text-indent:0px;letter-spacing:normal;font-variant:normal;font-style:normal;fon \
t-weight:normal;line-height:normal;border-collapse:separate;text-transform:none;font-size:medium;white-space:normal;font-family:Optima;word-spacing:0px"><div \
style="word-wrap:break-word"> <div>Noam Birnbaum</div><div>Mac Daddy</div><div><a \
href="http://www.maccentricsolutions.com/" \
target="_blank">http://www.maccentricsolutions.com</a></div><div>877.luv.macs \
x666</div><div>tweet @noamb</div><div><br></div><div> <font size="3"><span \
style="font-size:11px">Tech support —> </span></font><font \
color="#005C9A"><font size="3"><span \
style="font-size:11px">877.luv.macs</span></font></font><font size="3"><span \
style="font-size:11px"><span> </span>or<span> </span></span></font><font \
color="#005C9A"><font size="3"><span style="font-size:11px"><a \
href="mailto:support@maccentricsolutions.com" \
target="_blank">support@maccentricsolutions.com</a></span></font></font></div> \
</div></span></div></span></div></span></div></span></div></span></div></span></span> \
</div> <br></div></div><br>_______________________________________________<br>
Ntop mailing list<br>
<a href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a><br>
<a href="http://listgateway.unipi.it/mailman/listinfo/ntop" \
target="_blank">http://listgateway.unipi.it/mailman/listinfo/ntop</a><br> \
<br></blockquote></div><br> _______________________________________________<br>Ntop \
mailing list<br><a href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</ \
a><br>http://listgateway.unipi.it/mailman/listinfo/ntop<br></blockquote></div><br></div></body></html>
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic