On May 18, 2018, at 6:08 PM, Ben Higgins <b...@extrahop.com> wrote: > Sounds like it'd still be fine for there to be multiple keylog blocks,
Yes. > but, as you say, they must occur before any packets that require the secrets > contained therein. Is that correct? Yes. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe