SSLDump is a network protocol analyzer designed to examine the SSLv3 and TLS protocols. Its primary function is to identify and analyze communication non-invasively, making it useful for security-related tasks such as monitoring and debugging.
If you are looking for a SSLv3/TLS network protocol analyzer, then ssldump is an excellent choice. It is capable of identifying TCP connections on the chosen network interface and interpreting them as SSLv3/TLS traffic. Once this traffic is recognized, ssldump goes ahead and decodes the records, displaying them in a neat textual form on your console.
The proper functioning of ssldump depends on the libpcap capture library. While some systems (e.g. FreeBSD) have it pre-installed, you might have to install it on other systems. The distribution for this library can be obtained from a specific link.
If ssldump is linked with OpenSSL, it can display decrypted certificates in decoded form, and by extension, decrypt traffic, given that the keying material is available. You might also have OpenSSL already installed on your system, otherwise you can obtain it from a separate link.
In the latest release of ssldump, a security fix for some potential over and underflows was added along with support for VLANs. Additionally, a -P flag was included to disable the promiscuous mode, and lastly, a lot of bugs in the TCP reassembly were fixed. Overall, ssldump is an excellent tool that is always improving, and its latest release is no exception.
The proper functioning of ssldump depends on the libpcap capture library. While some systems (e.g. FreeBSD) have it pre-installed, you might have to install it on other systems. The distribution for this library can be obtained from a specific link.
If ssldump is linked with OpenSSL, it can display decrypted certificates in decoded form, and by extension, decrypt traffic, given that the keying material is available. You might also have OpenSSL already installed on your system, otherwise you can obtain it from a separate link.
In the latest release of ssldump, a security fix for some potential over and underflows was added along with support for VLANs. Additionally, a -P flag was included to disable the promiscuous mode, and lastly, a lot of bugs in the TCP reassembly were fixed. Overall, ssldump is an excellent tool that is always improving, and its latest release is no exception.
What's New
Version 0.9b3: N/A