Last week, I participated in a contest, not a big deal. What is a big deal though is how much time I spent reading and searching for an answer that was right there in front of me. In less than 10 minutes I knew where I needed to focus my efforts to solve the problem, I just didn’t know how to get the answer.
Sadly I spent most of the day reading RFCs (never a bad thing) and trying to figure out how to decrypt a SNMPv3 packet when I already had the information I needed to decrypt it. A couple of people mentioned in the comments they found the answer searching Google. I didn’t ever see a link explaining how to use Wireshark to decrypt packets. After a while I finally decided to look through the options and preferences. I found what I needed and then got the answer I was looking for where I expected to find it.
Now in the future I will be sure to more thoroughly investigate all the features of my tools. I typically use Wireshark just to watch packets fly across the network so I can verify what is happening. All the other things it can do, like decrypting SNMPv3 packets, didn’t know that. Didn’t even care until last week, but now I know better.