Printer FriendlyEmail Article Link

How to view encrypted SUPL messages in Wireshark?

Answer

 

By default, all SUPL messages and messages during TLS negotiation are encrypted and not be able to view in Wireshark. It's necessary to input the decryption key to let wireshark fully decode the messages. It's done by:
1. selecting menu "Edit" -> "Preferences" item
2. choosing "SSL" under "Protocols" tree in the windows at the left hand side
3. input the following in the "RSA keys list" field "192.168.0.35,7275,ULP,C:\Program Files\Spirent Communications\TestDrive ULTS\PRIVATEKEYS\spirentkey.pem"
After that, all TLS negotiation messages and SUPL messages can be decoded and view in wireshark.

Product : SUPL