Packetbeat: Decode Https Traffic

Elastic Stack Beats
1

Hi Folks,

Is there any way to decode https/ssl traffic using packetbeat ?
I have to server/client key do decode the traffic but i dont know how can i use it to decode the traffic.

Thks

2

No, Packetbeat cannot do Man in the Middle. You would need a tool like squid proxy or another commerical tool.

1 Like
3

Thanks @legoguy1000

Ps.: i hope packetbeat can do it in the future.

4

I don't think it ever will. All packet beat does is listen on an interface in promiscuous mode. In order to do MITM, it's have to listen on a port and respond/forward requests.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.