Skip to content

Commit

Permalink
docs: update README.md (#306)
Browse files Browse the repository at this point in the history
* docs: update README_CN.md

* docs: update README.md
  • Loading branch information
onism68 authored Feb 7, 2023
1 parent 09197fd commit 93fd746
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 6 deletions.
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ directly.
### plaintext result

`./ecapture tls` will capture all plaintext context ,output to console, and capture `Master Secret` of `openssl TLS`
save to `ecapture_master.log`. You can also use `tcpdump` to capture raw packet,and use `Wireshark` to read them
save to `ecapture_masterkey.log`. You can also use `tcpdump` to capture raw packet,and use `Wireshark` to read them
with `Master Secret` settings.

>
Expand Down Expand Up @@ -233,4 +233,4 @@ See [CONTRIBUTING](./CONTRIBUTING.md) for details on submitting patches and the
<!-- markdownlint-restore -->
<!-- prettier-ignore-end -->

<!-- ALL-CONTRIBUTORS-LIST:END -->
<!-- ALL-CONTRIBUTORS-LIST:END -->
7 changes: 3 additions & 4 deletions README_CN.md
Original file line number Diff line number Diff line change
Expand Up @@ -72,12 +72,11 @@ eCapture默认查找`/etc/ld.so.conf`文件,查找SO文件的加载目录,

### Pcapng输出格式

`./ecapture tls -i eth0 -w pcapng -p 443` 直接讲捕获的明文数据包保存为pcapng格式,直接使用`Wireshark`打开查看。
`./ecapture tls -i eth0 -w pcapng -p 443` 将捕获的明文数据包保存为pcapng文件,可以使用`Wireshark`打开查看。

### 文本输出格式

`./ecapture tls` 将会输出所有的明文数据包,并捕获openssl TLS的密钥`Master Secret`
文件到当前目录的ecapture_master.log中。你也可以同时开启`tcpdump`抓包,再使用`Wireshark`打开,设置`Master Secret`路径,查看明文数据包。
`./ecapture tls` 将会输出所有的明文数据包,并捕获openssl TLS的密钥`Master Secret`文件到当前目录的`ecapture_masterkey.log`中。你也可以同时开启`tcpdump`抓包,再使用`Wireshark`打开,设置`Master Secret`路径,查看明文数据包。

### 验证方法:

Expand Down Expand Up @@ -218,4 +217,4 @@ bin/ecapture

# 参考资料
[BPF Portability and CO-RE](https://facebookmicrosites.github.io/bpf/blog/2020/02/19/bpf-portability-and-co-re.html)
[ebpfmanager v0.2.2](https://github.com/gojue/ebpfmanager)
[ebpfmanager v0.2.2](https://github.com/gojue/ebpfmanager)

0 comments on commit 93fd746

Please sign in to comment.