The NmDecrypt application was developed to be a Network Monitor Expert which when given a trace with encrypted frames, a security certificate, and a passkey will create a new trace with decrypted frames added inline.
This Expert requires that you have Network Monitor 3.3 with the 3.4.2131 parser set (or above) installed.
Usage :
- Open an already existing trace (or save a new capture).
- Select the TCP conversation with the encrypted traffic.
- Run NmDecrypt from the Experts Menu.
Supported SSL/TLS Versions:
SSL 2.0
SSL 3.0
TLS 1.0
TLS 1.1
Note: For the above SSL/TLS versions the Expert does not support scenarios which involve Client Authentication and Decryption of Encrypted Alert Messages.
Supported Cipher Suites:
TLSRSAWITHAES128CBCSHA
TLSRSAWITHAES256CBCSHA
TLSRSAWITHRC4128_SHA
TLSRSAWITH3DESEDECBCSHA
TLSRSAWITHRC4128_MD5
SSLCKRC4128WITH_MD5
SSLCKDES192EDE3CBCWITH_MD5
TLSRSAWITHNULLMD5
TLSRSAWITHNULLSHA
Requirements:
ยท NET Framework Runtime 2.0 or above
