What is the process for deciphering network frames with Suricata?

Help
1

Please include the following information with your help request:

  • Suricata version 8.0.0-dev
  • Operating system and/or Linux distribution ubuntu 23.10
  • How you installed Suricata (from source, packages, something else)
    from repo github

do i must use sskey.log ,with the environment variable added: export SSLKEYLOGFILE="/home/alexandre/sslkey.log" in file ~/. bashrc? as for wireshark ? and how

and for the frames of the systems , is what I have to use the certificates in /etc/ssl/certs? I also have a file in /etc/ssl/private

regards

2

I think you’re asking if Suricata can decrypt files and then inspect the unencrypted contents. No, Suricata will not perform this function.

3

Is it possible to add this feature in this situation?

4

Anything’s possible but it’d start with a redmine ticket.

5

Hello,
what is redmine ticket ?
Regards

6

Opening a feature request ticket here: https://redmine.openinfosecfoundation.org/