Skip to main content
artooro
April 21, 2022
Question

How to use WireShark SSH Dump

  • April 21, 2022
  • 1 reply
  • 597 views

When using the sshdump (SSH Remote Capture) feature of WireShark, it has an option to authenticate using a private key, but this feature appears to be broken when using 1Password SSH.
The normal 1Password SSH approval prompt does not come up, but manually specifying an SSH key and passphrase in the Wireshark settings does not work either, it just times out.

So it appears the 1Password SSH agent is preventing Wireshark from connecting using a private key, and something is preventing it from working.


1Password Version: 8.7.0-80700049
Extension Version: Not Provided
OS Version: macOS 12.3.1

1 reply

floris_1P
1Password Employee
April 22, 2022

Do you see anything in the logs when invoking the SSH request? On macOS: ~/Library/Group Containers/2BUA8C4S2C.com.1password/Library/Application Support/1Password/Data/logs/1Password_rCURRENT.log