How to use WireShark SSH Dump

Options
artooro
artooro
Community Member
edited May 2022 in SSH

When using the sshdump (SSH Remote Capture) feature of WireShark, it has an option to authenticate using a private key, but this feature appears to be broken when using 1Password SSH.
The normal 1Password SSH approval prompt does not come up, but manually specifying an SSH key and passphrase in the Wireshark settings does not work either, it just times out.

So it appears the 1Password SSH agent is preventing Wireshark from connecting using a private key, and something is preventing it from working.


1Password Version: 8.7.0-80700049
Extension Version: Not Provided
OS Version: macOS 12.3.1

Comments

  • Do you see anything in the logs when invoking the SSH request? On macOS: ~/Library/Group Containers/2BUA8C4S2C.com.1password/Library/Application Support/1Password/Data/logs/1Password_rCURRENT.log

This discussion has been closed.