follow_tls_stream
Follow a TLS stream in a PCAP file and reconstruct its decrypted plaintext using an SSL key log file.
Instructions
Follow and reconstruct a decrypted TLS stream as plaintext.
Requires a TLS key log file (SSLKEYLOGFILE). To generate one:
Chrome/Edge: launch with --ssl-key-log-file=C:/path/keys.log
Firefox: set environment variable SSLKEYLOGFILE=C:/path/keys.log
Python requests/httpx: set SSLKEYLOGFILE env var before running
Args: file_path: Path to the PCAP file containing TLS traffic keylog_file: Path to the TLS key log file (SSLKEYLOGFILE format) stream_index: TLS stream index to follow (default: 0, the first stream)
Returns: Decrypted TLS stream content as ASCII plaintext
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| file_path | Yes | ||
| keylog_file | Yes | ||
| stream_index | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |