Packetbeat: Decode Https Traffic

Hi Folks,

Is there any way to decode https/ssl traffic using packetbeat ?
I have to server/client key do decode the traffic but i dont know how can i use it to decode the traffic.

Thks

No, Packetbeat cannot do Man in the Middle. You would need a tool like squid proxy or another commerical tool.

1 Like

Thanks @legoguy1000

Ps.: i hope packetbeat can do it in the future.

I don't think it ever will. All packet beat does is listen on an interface in promiscuous mode. In order to do MITM, it's have to listen on a port and respond/forward requests.