SPDY v3 sample captures

[theyok]

I've been trying to get unencrypted SPDY v3 packets for the last days now but have had no luck.

With SSL enabled Wireshark wasn't able to decrypt the SSL layer because Chrome seems to reuse SSL Sessions (The first session gets a 'close-notify' early in the handshake process).
With firefox I was able to decrypt the SSL (no session reuse) but the result was of course SPDY v2.
Running mod_spdy with no SSL also resulted in SPDY v2 being served (because of no negotiation option?)

[Adam Langley]

On Thu, Aug 16, 2012 at 7:22 AM, theyok <jg....@gmail.com> wrote:
> I've been trying to get unencrypted SPDY v3 packets for the last days now
> but have had no luck.

If you can build a trunk version of Wireshark, then this should work:

http://www.imperialviolet.org/2012/06/25/wireshark.html


Cheers

AGL

[Patrick McManus]

On Thu, 2012-08-16 at 07:22 -0700, theyok wrote:
> I've been trying to get unencrypted SPDY v3 packets for the last days
> now but have had no luck.

you can run firefox 16, currently on the aurora pre-release channel, for
spdy/3. http://www.mozilla.org/en-US/firefox/aurora/

[theyok]

Thanks Patrick and AGL!
I've ended up using the Firefox nightly build which indeed worked after disabling some cipher suites.
I'd probably want to see some Chrome captures as well so i'll try AGL's suggestion  later.

[Roberto Peon]

Trunk wireshark is useful for debugging sites with self-signed certs with Chrome as well.